Overview

overview

8

Static

static

8

Real Execu...33.exe

windows10-2004-x64

3

Real Execu...33.exe

windows11-21h2-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    262s
  • max time network
    325s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    22/05/2026, 13:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Real Executor_45561533.exe
  • Size 583KB
  • Sample260522-qgm3qaev81
  • SHA256 ddbd930cf742882ea6cc10ea5495f8aec24003664b81257c1b3900f3627b6684
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationransomwarespywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Password Policy Discovery 1 TTPs

    Attempt to access detailed information about the password policy used within an enterprise network.

    discovery
  • Drops file in System32 directory 9 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 3 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

    defense_evasion
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies trusted root certificate store through registry 1 TTPs 7 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

    defense_evasion
  • System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 64 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 11 IoCs
    defense_evasionspywaretrojan
  • NTFS ADS 1 IoCs
  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: LoadsDriver 3 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 44 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 48 IoCs
  • Suspicious use of SendNotifyMessage 21 IoCs
  • Suspicious use of SetWindowsHookEx 11 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k netsvcs -p -s Schedule
    1⤵
      PID:1260
      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
        2⤵
          PID:8080
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.57 --initial-client-data=0x280,0x284,0x288,0x218,0x28c,0x7ff7205d8eb8,0x7ff7205d8ec4,0x7ff7205d8ed0
            3⤵
              PID:6476
            • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
              3⤵
                PID:2212
          • C:\Users\Admin\AppData\Local\Temp\Real Executor_45561533.exe
            "C:\Users\Admin\AppData\Local\Temp\Real Executor_45561533.exe"
            1⤵
            • Downloads MZ/PE file
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:2560
            • C:\Program Files (x86)\Booster\GameBooster.exe
              "C:\Program Files (x86)\Booster\GameBooster.exe" install
              2⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:1604
            • C:\Users\Admin\AppData\Local\OperaGX_45561533.exe
              C:\Users\Admin\AppData\Local\OperaGX_45561533.exe --silent --allusers=0
              2⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:3636
              • C:\Users\Admin\AppData\Local\Temp\7zS43E53C28\installer.exe
                C:\Users\Admin\AppData\Local\Temp\7zS43E53C28\installer.exe --silent --allusers=0 --server-tracking-blob=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
                3⤵
                • Executes dropped EXE
                • Enumerates connected drives
                • Modifies system certificate store
                • Suspicious use of WriteProcessMemory
                PID:1896
                • C:\Users\Admin\AppData\Local\Temp\7zS43E53C28\installer.exe
                  C:\Users\Admin\AppData\Local\Temp\7zS43E53C28\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.84 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff7345c9e98,0x7ff7345c9ea4,0x7ff7345c9eb0
                  4⤵
                  • Executes dropped EXE
                  PID:3064
                • C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\installer.exe
                  "C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\installer.exe" --version
                  4⤵
                  • Executes dropped EXE
                  PID:2544
                • C:\Users\Admin\AppData\Local\Temp\7zS43E53C28\installer.exe
                  "C:\Users\Admin\AppData\Local\Temp\7zS43E53C28\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=1896 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_20260522141443" --session-guid=dbe473a7-3160-4e01-abd5-c38b2d4dd6cf --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=9807000000000000
                  4⤵
                  • Executes dropped EXE
                  • Enumerates connected drives
                  • Suspicious use of WriteProcessMemory
                  PID:3664
                  • C:\Users\Admin\AppData\Local\Temp\7zS43E53C28\installer.exe
                    C:\Users\Admin\AppData\Local\Temp\7zS43E53C28\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.84 --initial-client-data=0x280,0x284,0x294,0x25c,0x298,0x7ff7345c9e98,0x7ff7345c9ea4,0x7ff7345c9eb0
                    5⤵
                    • Executes dropped EXE
                    PID:4552
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\installer.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\installer.exe" --backend --initial-pid=1896 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431" --session-guid=dbe473a7-3160-4e01-abd5-c38b2d4dd6cf --server-tracking-blob="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 " --silent --desktopshortcut=1 --install-subfolder=131.0.5877.57
                    5⤵
                    • Executes dropped EXE
                    • Enumerates connected drives
                    • Enumerates system info in registry
                    • Modifies registry class
                    • Suspicious use of FindShellTrayWindow
                    • Suspicious use of WriteProcessMemory
                    PID:560
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\installer.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.57 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ff7d1a59e98,0x7ff7d1a59ea4,0x7ff7d1a59eb0
                      6⤵
                      • Executes dropped EXE
                      PID:4944
                    • C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\assistant\assistant_installer.exe
                      "C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                      6⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Adds Run key to start application
                      • System Location Discovery: System Language Discovery
                      • Enumerates system info in registry
                      • Modifies Internet Explorer settings
                      • Suspicious use of WriteProcessMemory
                      PID:1268
                      • C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\assistant\assistant_installer.exe
                        "C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x8c1b80,0x8c1b8c,0x8c1b98
                        7⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:2232
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                        7⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        • Suspicious use of WriteProcessMemory
                        PID:1904
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7d1b80,0x7d1b8c,0x7d1b98
                          8⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          PID:8
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                          8⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          • Enumerates system info in registry
                          • Suspicious use of FindShellTrayWindow
                          • Suspicious use of SendNotifyMessage
                          • Suspicious use of WriteProcessMemory
                          PID:3764
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                            9⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • Suspicious use of WriteProcessMemory
                            PID:672
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_crashreporter.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.57 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ff9acd9e610,0x7ff9acd9e620,0x7ff9acd9e630
                              10⤵
                              • Executes dropped EXE
                              PID:2000
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                            9⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • Enumerates system info in registry
                            • Suspicious use of WriteProcessMemory
                            PID:2320
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_crashreporter.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.57 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ff9acd9e610,0x7ff9acd9e620,0x7ff9acd9e630
                              10⤵
                              • Executes dropped EXE
                              PID:3440
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x6b4370,0x6b437c,0x6b4388
                            9⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            • Suspicious use of WriteProcessMemory
                            PID:5052
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                              10⤵
                              • Executes dropped EXE
                              • Loads dropped DLL
                              • Suspicious use of WriteProcessMemory
                              PID:4736
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_crashreporter.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.57 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ff9acd9e610,0x7ff9acd9e620,0x7ff9acd9e630
                                11⤵
                                • Executes dropped EXE
                                PID:4068
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                              10⤵
                              • Executes dropped EXE
                              • Loads dropped DLL
                              • Suspicious use of WriteProcessMemory
                              PID:1180
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_crashreporter.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.57 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ff9acd9e610,0x7ff9acd9e620,0x7ff9acd9e630
                                11⤵
                                • Executes dropped EXE
                                PID:588
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                              10⤵
                              • Executes dropped EXE
                              • Loads dropped DLL
                              • Enumerates system info in registry
                              • Suspicious use of WriteProcessMemory
                              PID:4992
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_crashreporter.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.57 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ff9acd9e610,0x7ff9acd9e620,0x7ff9acd9e630
                                11⤵
                                • Executes dropped EXE
                                PID:1656
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                      6⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Adds Run key to start application
                      • Drops file in Windows directory
                      • Checks processor information in registry
                      • Enumerates system info in registry
                      • Modifies registry class
                      • Suspicious behavior: EnumeratesProcesses
                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                      • Suspicious use of AdjustPrivilegeToken
                      • Suspicious use of FindShellTrayWindow
                      • Suspicious use of SendNotifyMessage
                      • Suspicious use of WriteProcessMemory
                      PID:1632
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_crashreporter.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.57 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ff9acd9e610,0x7ff9acd9e620,0x7ff9acd9e630
                        7⤵
                        • Executes dropped EXE
                        PID:1604
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1656,i,12481606210375714066,17499965860594822098,262144 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1872 /prefetch:2
                        7⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:3820
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1836,i,10493232078006560115,9436651417572482327,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2084 /prefetch:11
                        7⤵
                        • Downloads MZ/PE file
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • System Time Discovery
                        • Enumerates system info in registry
                        PID:2024
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2180,i,2016536907208802934,4107796215740507833,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2564 /prefetch:13
                        7⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:2436
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3016,i,1024891581680302674,9605173488674901294,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3220 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:1052
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3164,i,10712042637731341786,2983138952463522585,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3244 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:3592
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3200,i,16197556845793956494,2377233610122614252,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3304 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:1884
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3212,i,8223942923421964262,16680874464526984612,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3324 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:1040
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3176,i,7348209578302068207,11294161041540551559,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3264 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:5092
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3188,i,5922945973030556506,8447997901969831365,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3284 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        PID:4208
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3660,i,1304222414407478498,3232687024969482029,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3544 /prefetch:1
                        7⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:1472
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_gx_splash.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                        7⤵
                        • Executes dropped EXE
                        PID:5076
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4560,i,6702202103676354732,8279342145262865558,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4568 /prefetch:1
                        7⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:5776
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4788,i,14449166668558158170,12729097765334242559,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4812 /prefetch:9
                        7⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:5836
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4952,i,15242648275820765771,2984715741047641750,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4964 /prefetch:1
                        7⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:5880
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5032,i,16980442379770266660,17470895525414402191,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5040 /prefetch:1
                        7⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:5920
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5064,i,8311861655697898498,16257883036837462166,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5060 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:5928
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5068,i,852582716430075352,14456102403722585326,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5052 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:6068
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5072,i,8854158428396123044,16926263323059531852,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5188 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:6084
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5076,i,11378493640883062467,1746710157809988569,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5264 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:5724
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5808,i,2555762274906639568,13321107492122370329,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5788 /prefetch:9
                        7⤵
                        • Executes dropped EXE
                        • Enumerates system info in registry
                        PID:4020
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6080,i,881004307023126060,11546411441622681708,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6256 /prefetch:9
                        7⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:4828
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6676,i,7277997901059247151,11831371188419443700,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6672 /prefetch:9
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:5692
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6960,i,7271470237095575901,16553449499523262496,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6696 /prefetch:1
                        7⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:5188
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6320,i,7723608898035373386,18402892576522157871,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7360 /prefetch:12
                        7⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:5452
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7508,i,18441979139070172240,2718694037650634562,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7536 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:5984
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7516,i,189652372513389771,7241894102663707555,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7572 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:4712
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7348,i,4608415529390010915,16987871319668183328,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7520 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:6104
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7564,i,15111808631498108186,14908540096275784088,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=6940 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:6124
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7604,i,3270872863746199648,11810919539855256135,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7616 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:5972
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7756,i,17443350044935738653,18009478289758137217,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7768 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:492
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8288,i,12686713009093752918,15544890005941098531,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8300 /prefetch:14
                        7⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:3800
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8320,i,8331147510614307458,8517235085352482410,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8332 /prefetch:14
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:4140
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8312,i,15360195149365165443,8870024347674241086,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8484 /prefetch:14
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:5504
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8504,i,15530324260597730803,12632808805065719256,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8520 /prefetch:14
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:3444
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=9048,i,7636423569064120017,17217608564449658266,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9076 /prefetch:9
                        7⤵
                        • Enumerates system info in registry
                        PID:7308
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9232,i,16757827480077658428,10028271317156813871,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9132 /prefetch:14
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:7352
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9264,i,11779884174386792168,3692036932613707928,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9268 /prefetch:14
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:7360
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9632,i,7166489979554236008,13926908929064627598,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9644 /prefetch:14
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:7632
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9664,i,6748354832715509135,4433455566424749538,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9676 /prefetch:14
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:7640
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9836,i,17623413335228342953,6929692421819152938,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9844 /prefetch:14
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:7664
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                        7⤵
                        • Enumerates system info in registry
                        PID:6240
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.57 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff7205d8eb8,0x7ff7205d8ec4,0x7ff7205d8ed0
                          8⤵
                            PID:6408
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=10388,i,6533929773971045066,16270709264905306655,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10424 /prefetch:1
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          • Enumerates system info in registry
                          PID:6352
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10628,i,17053398316384902230,9456588925398494832,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=9796 /prefetch:14
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          PID:6920
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5832,i,7963474881334918571,12659773918974016426,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=5824 /prefetch:14
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          • Enumerates system info in registry
                          PID:6988
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5588,i,16112950089216436992,6258795933248134518,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=8932 /prefetch:14
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          PID:7900
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9792,i,10695820369040413593,16584168175062374367,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=9768 /prefetch:14
                          7⤵
                            PID:8060
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3828,i,1338451979031647602,16262077541482129404,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=3840 /prefetch:14
                            7⤵
                            • Enumerates system info in registry
                            PID:8148
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5572,i,11345024056526641472,5370783142941635795,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=7320 /prefetch:14
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:444
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6188,i,9968899420743746934,13491859537111789247,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=6116 /prefetch:14
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:6276
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6148,i,16013760956955693098,10797563297385638673,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=5776 /prefetch:14
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:6216
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8496,i,6531997224224231508,2584059305283813725,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=9976 /prefetch:14
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:6464
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8188,i,5111712398826549936,6468384625122280884,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=10052 /prefetch:14
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:6816
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6192,i,7912908810313079577,13556484013948089694,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9008 /prefetch:14
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:5732
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=8676,i,6951129304621701262,12830301513205039988,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=6956 /prefetch:9
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:4196
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9864,i,4063998126542393704,12367099550692380919,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=8208 /prefetch:14
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:5532
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6092,i,12152035773034687743,962286238108959883,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=6136 /prefetch:14
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:7556
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5932,i,7628859822352052573,10381503060665527234,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=5556 /prefetch:14
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:7056
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10416,i,5265925699547693217,10965565446568467338,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=10392 /prefetch:14
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:7288
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10396,i,16255361654666058715,8290189211412307067,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8524 /prefetch:14
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:6848
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9936,i,12651106306092298203,12437663960324524439,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8856 /prefetch:14
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:4492
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8824,i,4579093600561547740,17456030887983267972,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=9280 /prefetch:14
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:5388
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=7312,i,15014140355200744567,2910255692943931950,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=8604 /prefetch:9
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:8004
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=4004,i,635730755475925771,4702004767619456158,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=3992 /prefetch:9
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:8168
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7972,i,17060708514611671402,2675922946035391095,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=4524 /prefetch:9
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:7896
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=10440,i,17136384510275954588,12589490557960283967,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=10448 /prefetch:1
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:7152
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --enable-quic --message-loop-type-ui --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8328,i,917891981550814552,10559197236748164700,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=8380 /prefetch:14
                            7⤵
                            • Enumerates system info in registry
                            • Modifies registry class
                            • Suspicious use of SetWindowsHookEx
                            PID:7432
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=9940,i,17696692215539869454,18275654609824356870,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=8648 /prefetch:1
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:7956
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3160,i,3889308449154101584,10521392346637464210,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=8436 /prefetch:14
                            7⤵
                            • Subvert Trust Controls: Mark-of-the-Web Bypass
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • NTFS ADS
                            PID:7932
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9316,i,6570970219908841236,5289101953774800569,524288 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=9012 /prefetch:14
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:7572
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=8568,i,11185974195217661471,14645487583595095981,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=4024 /prefetch:9
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:6580
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=9780,i,16234041438002759336,7659111936266348168,2097152 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=9420 /prefetch:9
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:6864
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=9728,i,9307677123153236251,7413541383843345904,262144 --field-trial-handle=1876,i,14992204927700663846,8774812194104647108,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1880,i,1260615414465051064,7358101479880443022,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=9740 /prefetch:10
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:6236
                    • C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\assistant\Opera_GX_assistant_131.0.5877.36_Setup.exe_sfx.exe
                      "C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\assistant\Opera_GX_assistant_131.0.5877.36_Setup.exe_sfx.exe"
                      4⤵
                      • Executes dropped EXE
                      • System Location Discovery: System Language Discovery
                      PID:1796
                    • C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\assistant\assistant_installer.exe
                      "C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\assistant\assistant_installer.exe" --version
                      4⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:1000
                      • C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\assistant\assistant_installer.exe
                        "C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x8c1b80,0x8c1b8c,0x8c1b98
                        5⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        PID:2728
                • C:\Windows\SysWOW64\NOTEPAD.EXE
                  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                  2⤵
                  • Opens file in notepad (likely ransom note)
                  PID:6600
                • C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe
                  "C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe" -c:1538 -t:InstallUnion
                  2⤵
                  • Drops file in Program Files directory
                  • System Location Discovery: System Language Discovery
                  PID:6392
                  • C:\Program Files (x86)\PremierOpinion\pmropn.exe
                    C:\Program Files (x86)\PremierOpinion\pmropn.exe -install -uninst:PremierOpinion -t:InstallUnion -bid:gE607UjfAuuW2QpCHLPOGG -o:0
                    3⤵
                    • Drops file in System32 directory
                    • Modifies trusted root certificate store through registry
                    • System Location Discovery: System Language Discovery
                    • Modifies system certificate store
                    PID:7620
              • C:\Program Files (x86)\Booster\GameBooster.exe
                "C:\Program Files (x86)\Booster\GameBooster.exe"
                1⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Drops file in System32 directory
                • Modifies data under HKEY_USERS
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of WriteProcessMemory
                PID:2672
                • C:\Program Files (x86)\Booster\GameBooster.exe
                  "C:\Program Files (x86)\Booster\GameBooster.exe" --minimized
                  2⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  PID:2648
              • C:\Windows\SysWOW64\werfault.exe
                werfault.exe /h /shared Global\74ee7f5dccce424e9f7fc9a0298bcb0c /t 4512 /p 2560
                1⤵
                  PID:228
                • C:\Windows\SysWOW64\werfault.exe
                  werfault.exe /h /shared Global\f2405e1d5cab458a989926358715be10 /t 4512 /p 2560
                  1⤵
                    PID:1432
                  • C:\Windows\system32\wbem\unsecapp.exe
                    C:\Windows\system32\wbem\unsecapp.exe -Embedding
                    1⤵
                      PID:5404
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                      1⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:5428
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_crashreporter.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.57 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ff9acd9e610,0x7ff9acd9e620,0x7ff9acd9e630
                        2⤵
                        • Executes dropped EXE
                        PID:5444
                    • C:\Program Files (x86)\PremierOpinion\pmservice.exe
                      "C:\Program Files (x86)\PremierOpinion\pmservice.exe" /service
                      1⤵
                      • Drops file in Program Files directory
                      • Modifies trusted root certificate store through registry
                      • System Location Discovery: System Language Discovery
                      • Modifies data under HKEY_USERS
                      • Modifies system certificate store
                      • Suspicious behavior: EnumeratesProcesses
                      PID:6848
                      • C:\Windows\system32\rundll32.exe
                        C:\Windows\system32\rundll32.exe C:\Windows\system32\pmls64.dll,UpdateProcess 1260
                        2⤵
                          PID:6244
                        • C:\Windows\SysWOW64\reg.exe
                          reg.exe EXPORT "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{eeb86aef-4a5d-4b75-9d74-f16d438fc286}" C:\PROGRA~2\PREMIE~1\RData.reg /y
                          2⤵
                          • Drops file in Windows directory
                          • System Location Discovery: System Language Discovery
                          PID:6596
                        • \??\c:\program files (x86)\premieropinion\pmropn.exe
                          "c:\program files (x86)\premieropinion\pmropn.exe" -boot
                          2⤵
                          • Drops file in Program Files directory
                          • Modifies system certificate store
                          • Suspicious behavior: EnumeratesProcesses
                          • Suspicious use of FindShellTrayWindow
                          • Suspicious use of SendNotifyMessage
                          • Suspicious use of SetWindowsHookEx
                          PID:4144
                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                            CheckNetIsolation.exe LoopbackExempt -s
                            3⤵
                            • System Location Discovery: System Language Discovery
                            PID:7648
                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                            CheckNetIsolation.exe LoopbackExempt -s
                            3⤵
                            • System Location Discovery: System Language Discovery
                            PID:2608
                          • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                            powershell Get-AppxPackage
                            3⤵
                              PID:5260
                          • C:\Windows\SysWOW64\cmd.exe
                            /C C:\PROGRA~2\PREMIE~1\pmropn32.exe 4144
                            2⤵
                            • System Location Discovery: System Language Discovery
                            PID:8052
                            • C:\PROGRA~2\PREMIE~1\pmropn32.exe
                              C:\PROGRA~2\PREMIE~1\pmropn32.exe 4144
                              3⤵
                              • System Location Discovery: System Language Discovery
                              • Suspicious use of SetWindowsHookEx
                              PID:5396
                          • C:\Windows\SysWOW64\cmd.exe
                            /C C:\PROGRA~2\PREMIE~1\pmropn64.exe 4144
                            2⤵
                            • System Location Discovery: System Language Discovery
                            PID:7136
                            • C:\PROGRA~2\PREMIE~1\pmropn64.exe
                              C:\PROGRA~2\PREMIE~1\pmropn64.exe 4144
                              3⤵
                              • Suspicious use of SetWindowsHookEx
                              PID:6320
                          • \??\c:\program files (x86)\premieropinion\pmropn.exe
                            "c:\program files (x86)\premieropinion\pmropn.exe" -updateapps
                            2⤵
                              PID:6980
                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                CheckNetIsolation.exe LoopbackExempt -a -n=1527c705-839a-4832-9118-54d4bd6a0c89_cw5n1h2txyewy
                                3⤵
                                • System Location Discovery: System Language Discovery
                                PID:7836
                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                CheckNetIsolation.exe LoopbackExempt -a -n=c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy
                                3⤵
                                • System Location Discovery: System Language Discovery
                                PID:6264
                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                CheckNetIsolation.exe LoopbackExempt -a -n=e2a4f912-2574-4a75-9bb0-0d023378592b_cw5n1h2txyewy
                                3⤵
                                • System Location Discovery: System Language Discovery
                                PID:5744
                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                CheckNetIsolation.exe LoopbackExempt -a -n=f46d4000-fd22-4db4-ac8e-4e1ddde828fe_cw5n1h2txyewy
                                3⤵
                                • System Location Discovery: System Language Discovery
                                PID:1052
                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.aad.brokerplugin_cw5n1h2txyewy
                                3⤵
                                • System Location Discovery: System Language Discovery
                                PID:7792
                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.accountscontrol_cw5n1h2txyewy
                                3⤵
                                • System Location Discovery: System Language Discovery
                                PID:7508
                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.asynctextservice_8wekyb3d8bbwe
                                3⤵
                                  PID:6536
                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.bingnews_8wekyb3d8bbwe
                                  3⤵
                                    PID:8140
                                  • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.bingweather_8wekyb3d8bbwe
                                    3⤵
                                      PID:3996
                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.bioenrollment_cw5n1h2txyewy
                                      3⤵
                                        PID:7936
                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.creddialoghost_cw5n1h2txyewy
                                        3⤵
                                          PID:8060
                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.desktopappinstaller_8wekyb3d8bbwe
                                          3⤵
                                            PID:5144
                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                            CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.ecapp_8wekyb3d8bbwe
                                            3⤵
                                              PID:7132
                                            • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                              CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.gamingapp_8wekyb3d8bbwe
                                              3⤵
                                              • System Location Discovery: System Language Discovery
                                              PID:6112
                                            • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                              CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.gethelp_8wekyb3d8bbwe
                                              3⤵
                                                PID:4316
                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.heifimageextension_8wekyb3d8bbwe
                                                3⤵
                                                • System Location Discovery: System Language Discovery
                                                PID:6132
                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.lockapp_cw5n1h2txyewy
                                                3⤵
                                                • System Location Discovery: System Language Discovery
                                                PID:7120
                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.microsoftedge.stable_8wekyb3d8bbwe
                                                3⤵
                                                • System Location Discovery: System Language Discovery
                                                PID:5336
                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.microsoftedge_8wekyb3d8bbwe
                                                3⤵
                                                • System Location Discovery: System Language Discovery
                                                PID:6508
                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.microsoftedgedevtoolsclient_8wekyb3d8bbwe
                                                3⤵
                                                • System Location Discovery: System Language Discovery
                                                PID:6684
                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.microsoftofficehub_8wekyb3d8bbwe
                                                3⤵
                                                • System Location Discovery: System Language Discovery
                                                PID:7256
                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.microsoftsolitairecollection_8wekyb3d8bbwe
                                                3⤵
                                                • System Location Discovery: System Language Discovery
                                                PID:7500
                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.microsoftstickynotes_8wekyb3d8bbwe
                                                3⤵
                                                  PID:5676
                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.net.native.framework.2.2_8wekyb3d8bbwe
                                                  3⤵
                                                  • System Location Discovery: System Language Discovery
                                                  PID:6692
                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.net.native.runtime.2.2_8wekyb3d8bbwe
                                                  3⤵
                                                  • System Location Discovery: System Language Discovery
                                                  • System Time Discovery
                                                  PID:7068
                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.onedrivesync_8wekyb3d8bbwe
                                                  3⤵
                                                  • System Location Discovery: System Language Discovery
                                                  PID:6128
                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.people_8wekyb3d8bbwe
                                                  3⤵
                                                    PID:7304
                                                  • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.powerautomatedesktop_8wekyb3d8bbwe
                                                    3⤵
                                                      PID:7328
                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.storepurchaseapp_8wekyb3d8bbwe
                                                      3⤵
                                                        PID:8024
                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.todos_8wekyb3d8bbwe
                                                        3⤵
                                                        • System Location Discovery: System Language Discovery
                                                        PID:7036
                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.ui.xaml.2.4_8wekyb3d8bbwe
                                                        3⤵
                                                        • System Location Discovery: System Language Discovery
                                                        PID:5980
                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.ui.xaml.cbs_8wekyb3d8bbwe
                                                        3⤵
                                                        • System Location Discovery: System Language Discovery
                                                        PID:3024
                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.vclibs.140.00.uwpdesktop_8wekyb3d8bbwe
                                                        3⤵
                                                        • System Location Discovery: System Language Discovery
                                                        PID:5128
                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.vclibs.140.00_8wekyb3d8bbwe
                                                        3⤵
                                                        • System Location Discovery: System Language Discovery
                                                        PID:1092
                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.vp9videoextensions_8wekyb3d8bbwe
                                                        3⤵
                                                        • System Location Discovery: System Language Discovery
                                                        PID:6960
                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.webmediaextensions_8wekyb3d8bbwe
                                                        3⤵
                                                        • System Location Discovery: System Language Discovery
                                                        PID:6296
                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.webpimageextension_8wekyb3d8bbwe
                                                        3⤵
                                                        • System Location Discovery: System Language Discovery
                                                        PID:3608
                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.win32webviewhost_cw5n1h2txyewy
                                                        3⤵
                                                        • System Location Discovery: System Language Discovery
                                                        PID:6760
                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.apprep.chxapp_cw5n1h2txyewy
                                                        3⤵
                                                          PID:4800
                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy
                                                          3⤵
                                                            PID:3208
                                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                            CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.callingshellapp_cw5n1h2txyewy
                                                            3⤵
                                                              PID:7596
                                                            • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                              CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.capturepicker_cw5n1h2txyewy
                                                              3⤵
                                                              • System Location Discovery: System Language Discovery
                                                              PID:7668
                                                            • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                              CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.cloudexperiencehost_cw5n1h2txyewy
                                                              3⤵
                                                                PID:6284
                                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.contentdeliverymanager_cw5n1h2txyewy
                                                                3⤵
                                                                • System Location Discovery: System Language Discovery
                                                                PID:5168
                                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.narratorquickstart_8wekyb3d8bbwe
                                                                3⤵
                                                                  PID:3260
                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.oobenetworkcaptiveportal_cw5n1h2txyewy
                                                                  3⤵
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:3800
                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.oobenetworkconnectionflow_cw5n1h2txyewy
                                                                  3⤵
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:4956
                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.parentalcontrols_cw5n1h2txyewy
                                                                  3⤵
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:7556
                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.peopleexperiencehost_cw5n1h2txyewy
                                                                  3⤵
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:7584
                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.pinningconfirmationdialog_cw5n1h2txyewy
                                                                  3⤵
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:7448
                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.search_cw5n1h2txyewy
                                                                  3⤵
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:8124
                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.secureassessmentbrowser_cw5n1h2txyewy
                                                                  3⤵
                                                                    PID:7864
                                                                  • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.shellexperiencehost_cw5n1h2txyewy
                                                                    3⤵
                                                                    • System Location Discovery: System Language Discovery
                                                                    PID:7360
                                                                  • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy
                                                                    3⤵
                                                                      PID:7020
                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.xgpuejectdialog_cw5n1h2txyewy
                                                                      3⤵
                                                                      • System Location Discovery: System Language Discovery
                                                                      PID:2064
                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windowsalarms_8wekyb3d8bbwe
                                                                      3⤵
                                                                      • System Location Discovery: System Language Discovery
                                                                      PID:7852
                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windowscalculator_8wekyb3d8bbwe
                                                                      3⤵
                                                                        PID:6172
                                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windowsfeedbackhub_8wekyb3d8bbwe
                                                                        3⤵
                                                                        • System Location Discovery: System Language Discovery
                                                                        PID:7952
                                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windowsmaps_8wekyb3d8bbwe
                                                                        3⤵
                                                                          PID:8104
                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windowssoundrecorder_8wekyb3d8bbwe
                                                                          3⤵
                                                                          • System Location Discovery: System Language Discovery
                                                                          PID:7164
                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windowsterminal_8wekyb3d8bbwe
                                                                          3⤵
                                                                          • System Location Discovery: System Language Discovery
                                                                          PID:6952
                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.xbox.tcui_8wekyb3d8bbwe
                                                                          3⤵
                                                                            PID:4600
                                                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                            CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.xboxgamecallableui_cw5n1h2txyewy
                                                                            3⤵
                                                                            • System Location Discovery: System Language Discovery
                                                                            PID:4884
                                                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                            CheckNetIsolation.exe LoopbackExempt -a -n=microsoftwindows.client.cbs_cw5n1h2txyewy
                                                                            3⤵
                                                                              PID:6512
                                                                            • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                              CheckNetIsolation.exe LoopbackExempt -a -n=microsoftwindows.undockeddevkit_cw5n1h2txyewy
                                                                              3⤵
                                                                              • System Location Discovery: System Language Discovery
                                                                              PID:7108
                                                                            • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                              CheckNetIsolation.exe LoopbackExempt -a -n=ncsiuwpapp_8wekyb3d8bbwe
                                                                              3⤵
                                                                                PID:7264
                                                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                CheckNetIsolation.exe LoopbackExempt -a -n=windows.cbspreview_cw5n1h2txyewy
                                                                                3⤵
                                                                                • System Location Discovery: System Language Discovery
                                                                                PID:6684
                                                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                CheckNetIsolation.exe LoopbackExempt -a -n=windows.printdialog_cw5n1h2txyewy
                                                                                3⤵
                                                                                • System Location Discovery: System Language Discovery
                                                                                PID:6580
                                                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                CheckNetIsolation.exe LoopbackExempt -a -n=windows_ie_ac_001
                                                                                3⤵
                                                                                • System Location Discovery: System Language Discovery
                                                                                PID:6596
                                                                            • \??\c:\program files (x86)\premieropinion\pmropn.exe
                                                                              "c:\program files (x86)\premieropinion\pmropn.exe" -installmenu:PremierOpinion -v:NONE
                                                                              2⤵
                                                                              • Drops file in System32 directory
                                                                              • Modifies data under HKEY_USERS
                                                                              PID:7060
                                                                          • C:\Windows\system32\wbem\unsecapp.exe
                                                                            C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                            1⤵
                                                                              PID:7532
                                                                            • C:\Windows\System32\rundll32.exe
                                                                              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                              1⤵
                                                                                PID:6920
                                                                              • C:\Users\Admin\Downloads\RealSetup.exe
                                                                                "C:\Users\Admin\Downloads\RealSetup.exe"
                                                                                1⤵
                                                                                  PID:6904
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://projectreal.net/download
                                                                                    2⤵
                                                                                    • Drops file in Windows directory
                                                                                    • Checks SCSI registry key(s)
                                                                                    • Modifies data under HKEY_USERS
                                                                                    • Modifies registry class
                                                                                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                    • Suspicious use of FindShellTrayWindow
                                                                                    PID:1084
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x398,0x39c,0x3a0,0x394,0x3a8,0x7ff9c0c8c188,0x7ff9c0c8c194,0x7ff9c0c8c1a0
                                                                                      3⤵
                                                                                        PID:1028
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,16589215900276372195,13802343220771434942,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:11
                                                                                        3⤵
                                                                                        • System Time Discovery
                                                                                        PID:4712
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,10346644582582116944,1930741417512416481,262144 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:2
                                                                                        3⤵
                                                                                          PID:1884
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,6133111297565591112,1025945756558812151,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:13
                                                                                          3⤵
                                                                                            PID:2872
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,7693587265384970402,1505800138757488315,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
                                                                                            3⤵
                                                                                              PID:7656
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,14507250745252399007,14087272666654078057,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
                                                                                              3⤵
                                                                                                PID:8092
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,14269897501827401029,17069310543938236800,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:9
                                                                                                3⤵
                                                                                                  PID:8148
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4292,i,8865860710094490444,9265496900433869670,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:1
                                                                                                  3⤵
                                                                                                    PID:4760
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,9619302409836589517,15076124583116045369,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:1
                                                                                                    3⤵
                                                                                                      PID:1700
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4304,i,17673921583896347155,4461581063816574979,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:9
                                                                                                      3⤵
                                                                                                        PID:7692
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,18406430439863970458,15249343032072544064,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:14
                                                                                                        3⤵
                                                                                                          PID:412
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5652,i,8875819680700518386,60943905815214525,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:14
                                                                                                          3⤵
                                                                                                            PID:7256
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,9460906872049617646,7534348896649428814,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:14
                                                                                                            3⤵
                                                                                                              PID:5700
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5772,i,7653026996315292682,15152461697694946777,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
                                                                                                              3⤵
                                                                                                                PID:7164
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,18240962522260322824,15319982157219180982,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:14
                                                                                                                3⤵
                                                                                                                  PID:6256
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6464,i,10867850175802882252,6152902268040764450,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:14
                                                                                                                  3⤵
                                                                                                                    PID:7628
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                                                                                                      cookie_exporter.exe --cookie-json=1328
                                                                                                                      4⤵
                                                                                                                        PID:6080
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,18240962522260322824,15319982157219180982,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:14
                                                                                                                      3⤵
                                                                                                                        PID:5692
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6536,i,11513351706111196610,10589459063938901842,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:1
                                                                                                                        3⤵
                                                                                                                          PID:1700
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6764,i,6113078035749383741,11689243635578909189,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6768 /prefetch:1
                                                                                                                          3⤵
                                                                                                                            PID:3760
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7096,i,14740848782183164374,12163946893751694985,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=7100 /prefetch:1
                                                                                                                            3⤵
                                                                                                                              PID:6252
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6464,i,14506997364771294861,13557030267544397668,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:14
                                                                                                                              3⤵
                                                                                                                                PID:6292
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7156,i,7487659008903579321,10704235589114196955,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=7352 /prefetch:1
                                                                                                                                3⤵
                                                                                                                                  PID:6096
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7608,i,6965220831348258888,8684156050086118704,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:14
                                                                                                                                  3⤵
                                                                                                                                    PID:7240
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7600,i,6909511701197912021,8758215385918959468,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:1
                                                                                                                                    3⤵
                                                                                                                                      PID:7612
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7732,i,14242644885002923074,9286256154014725897,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:1
                                                                                                                                      3⤵
                                                                                                                                        PID:7016
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6608,i,12336131446986543082,14570396306849202126,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:14
                                                                                                                                        3⤵
                                                                                                                                          PID:5984
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,9120926084030170443,9346191558091593029,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=7060 /prefetch:14
                                                                                                                                          3⤵
                                                                                                                                            PID:4760
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7316,i,8115578409936959198,6070069955623826103,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:14
                                                                                                                                            3⤵
                                                                                                                                              PID:6868
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=4492,i,2130594494973599907,13570819210364620578,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=7260 /prefetch:1
                                                                                                                                              3⤵
                                                                                                                                                PID:4308
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7600,i,1258898873443812198,396177141356405825,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:1
                                                                                                                                                3⤵
                                                                                                                                                  PID:7432
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7096,i,15336755273172507888,5333434947362482045,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:1
                                                                                                                                                  3⤵
                                                                                                                                                    PID:7040
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=5256,i,15164176805382190447,6113216203315682315,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=8000 /prefetch:1
                                                                                                                                                    3⤵
                                                                                                                                                      PID:8128
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=6760,i,7167502366940323433,3683560076454764635,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=7932 /prefetch:1
                                                                                                                                                      3⤵
                                                                                                                                                        PID:6268
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7488,i,11656712657039450118,935568375177672208,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=7244 /prefetch:1
                                                                                                                                                        3⤵
                                                                                                                                                          PID:6808
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=7920,i,11210265928181337809,13437146158521460593,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:1
                                                                                                                                                          3⤵
                                                                                                                                                            PID:7644
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=7236,i,10950626136571450976,2730061269678665421,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=7616 /prefetch:1
                                                                                                                                                            3⤵
                                                                                                                                                              PID:6628
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6844,i,10662818855054607150,13333182152603269764,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:14
                                                                                                                                                              3⤵
                                                                                                                                                                PID:7276
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7920,i,10966307200423944395,5020804189026665480,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:14
                                                                                                                                                                3⤵
                                                                                                                                                                  PID:5708
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8108,i,10141575501483104465,15932057063196962817,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6896 /prefetch:14
                                                                                                                                                                  3⤵
                                                                                                                                                                    PID:3828
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=2848,i,9231606507682700566,14198944909608331002,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:1
                                                                                                                                                                    3⤵
                                                                                                                                                                      PID:4164
                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=2092,i,6714287640200274148,18358218778238797819,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:1
                                                                                                                                                                      3⤵
                                                                                                                                                                        PID:6524
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=7404,i,8289363443495531868,12599720987682613842,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:1
                                                                                                                                                                        3⤵
                                                                                                                                                                          PID:7912
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=7036,i,11715932364345720039,9471098327234572734,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=7048 /prefetch:1
                                                                                                                                                                          3⤵
                                                                                                                                                                            PID:6352
                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=6468,i,4061685314108851351,5275159036256809447,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:1
                                                                                                                                                                            3⤵
                                                                                                                                                                              PID:7436
                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8460,i,3385923402109603671,18084002905604539741,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=8400 /prefetch:1
                                                                                                                                                                              3⤵
                                                                                                                                                                                PID:7700
                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8624,i,430166325436307986,8186066174504230605,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=8416 /prefetch:14
                                                                                                                                                                                3⤵
                                                                                                                                                                                  PID:3916
                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=6088,i,11678453435084966848,18056308489811765548,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:1
                                                                                                                                                                                  3⤵
                                                                                                                                                                                    PID:2464
                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=8900,i,706415903750474996,11208708920491428131,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=9004 /prefetch:1
                                                                                                                                                                                    3⤵
                                                                                                                                                                                      PID:5512
                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=7040,i,105281637859735673,8893493494461347746,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=9000 /prefetch:1
                                                                                                                                                                                      3⤵
                                                                                                                                                                                        PID:7968
                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=8964,i,1353199128658707393,774061256447135654,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=9068 /prefetch:1
                                                                                                                                                                                        3⤵
                                                                                                                                                                                          PID:6420
                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=8916,i,1798367537970561837,15273599099750982773,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=9016 /prefetch:1
                                                                                                                                                                                          3⤵
                                                                                                                                                                                            PID:7892
                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=8932,i,11908590497031258656,4266884557876180286,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=9028 /prefetch:1
                                                                                                                                                                                            3⤵
                                                                                                                                                                                              PID:2868
                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=8948,i,15303578661074496398,10364835265812509185,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=9048 /prefetch:1
                                                                                                                                                                                              3⤵
                                                                                                                                                                                                PID:8024
                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=6756,i,6118214382783365595,5176306667684092291,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=9088 /prefetch:1
                                                                                                                                                                                                3⤵
                                                                                                                                                                                                  PID:7316
                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=8352,i,18311336790973710594,15458581525757471252,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=9128 /prefetch:1
                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                    PID:7844
                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=6108,i,4064954850542969331,8328578129138508949,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=9108 /prefetch:1
                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                      PID:5376
                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=9332,i,11126033227796633323,6960830274549146416,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=10248 /prefetch:1
                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                        PID:6140
                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=9352,i,9135679196574836962,15773628117630244053,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=10252 /prefetch:1
                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                          PID:384
                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=9384,i,3330576833262168105,15600642240868427440,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=10324 /prefetch:1
                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                            PID:5576
                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=9368,i,9132997747812006491,8182213240056185736,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=10264 /prefetch:1
                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                              PID:7244
                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7048,i,4370795046667749227,14358258112309861047,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=8312 /prefetch:14
                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                PID:7800
                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=11088,i,10648278268455125985,12767627498874455649,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=11016 /prefetch:1
                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                  PID:3756
                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=11216,i,11230604069443798305,12919237614327018806,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=11244 /prefetch:1
                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                    PID:8712
                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=11200,i,2567143716907546913,10198948403681117770,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=11260 /prefetch:1
                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                      PID:8892
                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=11528,i,16633294462082321758,15995958373662469788,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=11564 /prefetch:1
                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                        PID:9040
                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=11720,i,10821368985861287446,11404324409876913105,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=11716 /prefetch:1
                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                          PID:5708
                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=9284,i,8116527959684261518,7727923694361455035,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=8296 /prefetch:1
                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                            PID:5640
                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=9328,i,2963420978377524856,10968394662046557519,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=10888 /prefetch:1
                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                              PID:9604
                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=11904,i,3766967468710831910,17230095478277096190,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=11928 /prefetch:1
                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                PID:9728
                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=5672,i,3028323337783286445,6599031284501410928,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:1
                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                  PID:3152
                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=1052,i,8690376434729650586,14908300188725070012,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=9352 /prefetch:1
                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                    PID:7764
                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=5592,i,17838154299084971811,15151469221497458228,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:1
                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                      PID:8428
                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=5708,i,15051781421469876921,10458075858857662388,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=12032 /prefetch:1
                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                        PID:7068
                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=5544,i,3003530661537512882,3314328392065956977,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=12076 /prefetch:1
                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                          PID:8744
                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=8464,i,16672482405259818371,17438273771814233092,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=12112 /prefetch:1
                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                            PID:4240
                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=10288,i,3613241400982854310,9140288947009861668,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=12148 /prefetch:1
                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                              PID:9240
                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=12016,i,11209563168178165263,3809270348365960257,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=12180 /prefetch:1
                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                PID:9264
                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=11996,i,12859128102470970739,3519498210813114544,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=12184 /prefetch:1
                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                  PID:9276
                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=12000,i,17842797052513207315,14504848548566593238,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=12204 /prefetch:1
                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                    PID:9284
                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=12008,i,417142174089241407,17655964857682691610,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=12216 /prefetch:1
                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                      PID:9268
                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,17348476872568881715,12215784302315327062,524288 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=12120 /prefetch:14
                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                        PID:9912
                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=13616,i,1346308616607312270,14511490805571931450,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=13644 /prefetch:1
                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                          PID:3656
                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=11400,i,2005804056459342191,1030763893607294898,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:1
                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                            PID:9904
                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=8368,i,17656240738210088585,4099449942870354701,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=13612 /prefetch:1
                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                              PID:10228
                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=10400,i,3170162830339235867,15234899653241205996,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=12328 /prefetch:1
                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                PID:7636
                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=13928,i,5213742318386339874,4001792846887744469,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=13916 /prefetch:1
                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                  PID:7652
                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=14108,i,11299098579534097545,16930992587327706932,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=14148 /prefetch:1
                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                    PID:7116
                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=12164,i,5710155989109117243,15088482678987252261,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=13960 /prefetch:1
                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                      PID:9180
                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=14396,i,10202766693292232674,18240936696068705021,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=14460 /prefetch:1
                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                        PID:8496
                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=8300,i,260048718756268362,7011101430312140412,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=14360 /prefetch:1
                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                          PID:3968
                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=9808,i,5711141009808670335,13248937107187299057,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=9776 /prefetch:1
                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                            PID:4924
                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=14900,i,12436375926070211656,17500011925782186067,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=9084 /prefetch:1
                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                              PID:10708
                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=14832,i,15129162446056310874,9224737066676570947,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=14604 /prefetch:1
                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                PID:10808
                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=13528,i,2777725028269603720,17547283799465338306,2097152 --field-trial-handle=2184,i,7628556841911368695,10515212721392345255,262144 --variations-seed-version --mojo-platform-channel-handle=13912 /prefetch:1
                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                  PID:10832
                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                PID:7636
                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                  PID:7792

                                                                                                                                                                                                                                                                                Network

                                                                                                                                                                                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                      Reconnaissance

                                                                                                                                                                                                                                                                                      Resource Development

                                                                                                                                                                                                                                                                                      Initial Access

                                                                                                                                                                                                                                                                                      Execution

                                                                                                                                                                                                                                                                                      Persistence

                                                                                                                                                                                                                                                                                      Boot or Logon Autostart Execution

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1547

                                                                                                                                                                                                                                                                                      Registry Run Keys / Startup Folder

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1547.001

                                                                                                                                                                                                                                                                                      Event Triggered Execution

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1546

                                                                                                                                                                                                                                                                                      Component Object Model Hijacking

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1546.015

                                                                                                                                                                                                                                                                                      Privilege Escalation

                                                                                                                                                                                                                                                                                      Boot or Logon Autostart Execution

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1547

                                                                                                                                                                                                                                                                                      Registry Run Keys / Startup Folder

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1547.001

                                                                                                                                                                                                                                                                                      Event Triggered Execution

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1546

                                                                                                                                                                                                                                                                                      Component Object Model Hijacking

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1546.015

                                                                                                                                                                                                                                                                                      Defense Evasion

                                                                                                                                                                                                                                                                                      Modify Registry

                                                                                                                                                                                                                                                                                      3
                                                                                                                                                                                                                                                                                      T1112

                                                                                                                                                                                                                                                                                      Subvert Trust Controls

                                                                                                                                                                                                                                                                                      3
                                                                                                                                                                                                                                                                                      T1553

                                                                                                                                                                                                                                                                                      Install Root Certificate

                                                                                                                                                                                                                                                                                      2
                                                                                                                                                                                                                                                                                      T1553.004

                                                                                                                                                                                                                                                                                      SIP and Trust Provider Hijacking

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1553.003

                                                                                                                                                                                                                                                                                      Credential Access

                                                                                                                                                                                                                                                                                      Credentials from Password Stores

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1555

                                                                                                                                                                                                                                                                                      Credentials from Web Browsers

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1555.003

                                                                                                                                                                                                                                                                                      Unsecured Credentials

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1552

                                                                                                                                                                                                                                                                                      Credentials In Files

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1552.001

                                                                                                                                                                                                                                                                                      Discovery

                                                                                                                                                                                                                                                                                      Browser Information Discovery

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1217

                                                                                                                                                                                                                                                                                      Network Share Discovery

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1135

                                                                                                                                                                                                                                                                                      Password Policy Discovery

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1201

                                                                                                                                                                                                                                                                                      Peripheral Device Discovery

                                                                                                                                                                                                                                                                                      2
                                                                                                                                                                                                                                                                                      T1120

                                                                                                                                                                                                                                                                                      Query Registry

                                                                                                                                                                                                                                                                                      6
                                                                                                                                                                                                                                                                                      T1012

                                                                                                                                                                                                                                                                                      System Information Discovery

                                                                                                                                                                                                                                                                                      5
                                                                                                                                                                                                                                                                                      T1082

                                                                                                                                                                                                                                                                                      System Location Discovery

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1614

                                                                                                                                                                                                                                                                                      System Language Discovery

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1614.001

                                                                                                                                                                                                                                                                                      System Network Configuration Discovery

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1016

                                                                                                                                                                                                                                                                                      Internet Connection Discovery

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1016.001

                                                                                                                                                                                                                                                                                      System Time Discovery

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1124

                                                                                                                                                                                                                                                                                      Lateral Movement

                                                                                                                                                                                                                                                                                      Collection

                                                                                                                                                                                                                                                                                      Data from Local System

                                                                                                                                                                                                                                                                                      1
                                                                                                                                                                                                                                                                                      T1005

                                                                                                                                                                                                                                                                                      Command and Control

                                                                                                                                                                                                                                                                                      Exfiltration

                                                                                                                                                                                                                                                                                      Impact

                                                                                                                                                                                                                                                                                      Replay Monitor

                                                                                                                                                                                                                                                                                      Loading Replay Monitor...

                                                                                                                                                                                                                                                                                      Downloads

                                                                                                                                                                                                                                                                                      snt.dat
                                                                                                                                                                                                                                                                                      • Path C:\PROGRA~2\PREMIE~1\snt.dat
                                                                                                                                                                                                                                                                                      • Size 3.4MB
                                                                                                                                                                                                                                                                                      • SHA256 d822dda3b97765ea774043b2a66c4cd030776ffc602194eb7ca3c871b17792fd
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      GameBooster.exe
                                                                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\Booster\GameBooster.exe
                                                                                                                                                                                                                                                                                      • Size 231KB
                                                                                                                                                                                                                                                                                      • SHA256 f13a0407af07f4537386e5109d16e4fefd23f515ae2ca8db04f3ccaac1ffaf14
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      hgsdk.dll
                                                                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\Booster\hgsdk.dll
                                                                                                                                                                                                                                                                                      • Size 4.2MB
                                                                                                                                                                                                                                                                                      • SHA256 c714754c5b3a91e2ae19016526f80049e1d550ce6298480786fed52126e7bfb6
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      cacert.pem
                                                                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\PremierOpinion\cacert.pem
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 9f19e7a7139cca8373b516ab1ae49c644aa1c8048e8c7aa5784774a081dcbb87
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      pmls.dll
                                                                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\PremierOpinion\pmls.dll
                                                                                                                                                                                                                                                                                      • Size 884KB
                                                                                                                                                                                                                                                                                      • SHA256 e471da417462c9f60181c27efe2355db4f0b3b4df6bd0d4097864a72677d8e5d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      pmph.dll
                                                                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\PremierOpinion\pmph.dll
                                                                                                                                                                                                                                                                                      • Size 806KB
                                                                                                                                                                                                                                                                                      • SHA256 7cdd0b4b6492483d07ddd1869ea4c213d8d5043aec14117b1a5926093bedc7e1
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      pmropn32.exe
                                                                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\PremierOpinion\pmropn32.exe
                                                                                                                                                                                                                                                                                      • Size 244KB
                                                                                                                                                                                                                                                                                      • SHA256 b56a74fbe9b0a0c027f230a412dd69afbb697c41f31635352b37fe74d334fc15
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      pmropn64.exe
                                                                                                                                                                                                                                                                                      • Path C:\Program Files (x86)\PremierOpinion\pmropn64.exe
                                                                                                                                                                                                                                                                                      • Size 303KB
                                                                                                                                                                                                                                                                                      • SHA256 f6de7618e24c0731e5ff77aa56f200d3c0e30e672a63c7d11b9717ece29e6814
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 71ccd39de69ec147afd8ad4337a36829dcababbf40897250380c7770de551242
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      B46811C17859FFB409CF0E904A4AA8F8
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
                                                                                                                                                                                                                                                                                      • Size 528B
                                                                                                                                                                                                                                                                                      • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                                                                                                                                      • Size 471B
                                                                                                                                                                                                                                                                                      • SHA256 0ced03aaf6e6b391b301a91d081b6d108628324b23a96a06f316ce56100536f4
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                                                                                                                                                                                                                      • Size 174B
                                                                                                                                                                                                                                                                                      • SHA256 038b9b543859a6d112bcb43b0eeff0743fb8198973545a03d07117dcac73ea61
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      B46811C17859FFB409CF0E904A4AA8F8
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
                                                                                                                                                                                                                                                                                      • Size 170B
                                                                                                                                                                                                                                                                                      • SHA256 5b4068b49f7c6f8ad5ad97f7dafe8b4db7de908feeb3ff10d417fbc454e245bc
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                                                                                                                                      • Size 416B
                                                                                                                                                                                                                                                                                      • SHA256 a5039b1bfaf8e122b8a21b2351984c2954a738f3ab2c6055f686a9cdde012282
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      settings.dat
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                      • Size 280B
                                                                                                                                                                                                                                                                                      • SHA256 3b442494723fd224268df79958ea0f6d02b8bba5bea3b3ac773cd572188d3a54
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      6efe6c1a-cae3-43ea-a4b9-88e52bcaafc4.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6efe6c1a-cae3-43ea-a4b9-88e52bcaafc4.tmp
                                                                                                                                                                                                                                                                                      • Size 6B
                                                                                                                                                                                                                                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      f_00007d
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
                                                                                                                                                                                                                                                                                      • Size 364KB
                                                                                                                                                                                                                                                                                      • SHA256 8659c125bc8718eb28f8269dfb43a22a2b080ffa264928c0370e09a444ec142d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      f_0000b5
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b5
                                                                                                                                                                                                                                                                                      • Size 73KB
                                                                                                                                                                                                                                                                                      • SHA256 fb69de564c55a631541f30a26e52223a2b422597eefa5a9e4edf9bceb8231067
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      6d033741-6e69-43ef-85ee-cf248c064f1a.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\6d033741-6e69-43ef-85ee-cf248c064f1a.tmp
                                                                                                                                                                                                                                                                                      • Size 2B
                                                                                                                                                                                                                                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Edge Profile.ico
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                                                                                                                      • Size 70KB
                                                                                                                                                                                                                                                                                      • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      42027d13-61d2-4271-87c8-b53766bf2332.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\42027d13-61d2-4271-87c8-b53766bf2332.tmp
                                                                                                                                                                                                                                                                                      • Size 2B
                                                                                                                                                                                                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                      • Size 16KB
                                                                                                                                                                                                                                                                                      • SHA256 45ddd2fcceeb83a7e04a625e32c2582b173df8a40ffb01cfd5612eb7fe51ecc7
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                      • Size 111B
                                                                                                                                                                                                                                                                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                      • Size 23KB
                                                                                                                                                                                                                                                                                      • SHA256 7c2e9abdc5a24d6ea6348c4aa939f81019c3f12d8f3755a6d8a5baf9bc1d0bc6
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                      • Size 22KB
                                                                                                                                                                                                                                                                                      • SHA256 706b07fbc181bcb298e57edeb193edb74c1ed753121944df3c9cf450c2cf7a98
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                      • Size 27KB
                                                                                                                                                                                                                                                                                      • SHA256 38e995879988c38424745398aa0a38af8faca160e2a373fb86f5be7274f98d3b
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                      • Size 16KB
                                                                                                                                                                                                                                                                                      • SHA256 636ef4efd47231304dab5f522a975585d920f430759f798b547c88563c10f258
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 e3c4f37794b678ae9116290fcc2fcd8e024e19855d56b6664c1462b54a76c36f
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Secure Preferences
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                      • Size 33KB
                                                                                                                                                                                                                                                                                      • SHA256 15766b473eed3990a90737c33ef21514ac4de9aa3d702baefea0fd4bee8ef226
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1927bbd8-f4f8-4811-b807-9378a5e80acf\index-dir\the-real-index
                                                                                                                                                                                                                                                                                      • Size 816B
                                                                                                                                                                                                                                                                                      • SHA256 5e0aef0b36a97e13fe5c9a5e8ef07f7ed8182142f58ed7cb95843db187544e1e
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      the-real-index~RFe5be26d.TMP
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1927bbd8-f4f8-4811-b807-9378a5e80acf\index-dir\the-real-index~RFe5be26d.TMP
                                                                                                                                                                                                                                                                                      • Size 816B
                                                                                                                                                                                                                                                                                      • SHA256 0481fc70c2d9e10305e2ceadfa683b6def2b3ac84415760546260afdbcc8770c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                                      • Size 371B
                                                                                                                                                                                                                                                                                      • SHA256 9dd9006a4d4e4af8c465e6db85b3f69ddb67e4a3e527a906810b7a5480477492
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      sync_diagnostic.log
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                                                                                                                      • Size 4KB
                                                                                                                                                                                                                                                                                      • SHA256 0954ea38ec75ce3b0abf40dc235bd9515aef5a3ad36f7fc8d5ece06048b94c63
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      OperationConfig
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                                                                                                                                                                      • Size 22KB
                                                                                                                                                                                                                                                                                      • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      OperationConfig~RFe5c2310.TMP
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5c2310.TMP
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                      • Size 25KB
                                                                                                                                                                                                                                                                                      • SHA256 8e16c67506576a957c7041bea6aca31ae5657e80228d0be88b7f8e5318460877
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                      • Size 20KB
                                                                                                                                                                                                                                                                                      • SHA256 6c8bbc6de8398caff69d099d3b9626f5c63abfe2034eec5509dbede00dc7b5ee
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                                                                                                                      • SHA256 73055da7676b5cb2c307a7860ac8da473d61572c91fa7fa7b93359da60bb1caf
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 ceed8f8d890b8a09b5c69547d7e8bce9a86aea7c674ed02b5c32bda69134f1ae
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                                                                                                                      • SHA256 0c3a4d50d116e6c5cb375936f5c92d83159291461c514e88b1666ce8dbefd6f3
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                      • Size 19KB
                                                                                                                                                                                                                                                                                      • SHA256 1b7d80ff5646beb6e666a80e2f8814853190ea2e494f621260d1d926437b6ed5
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                                                                                                      • SHA256 b7e843beb176158ff5ecf5c08f7db6bb2e69f0f2636135047b9fbb175e51bdd9
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                                                                                                      • SHA256 37a6326f4536100051567dc36b8f5d816fe01efe96e6b1d2aa2e3428a9dce331
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                                                                                                      • SHA256 eb4c3d41c17efd09eaa7f891d963ea122fc4c4286e770f94e1e848ef970a498b
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                                                                                                      • SHA256 4809bbc6ab2d1ff5ec00d1d6168a77472909e2cade7b6d9484d7fd5723c49ee3
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      RevisitationBloomfilter~RFe5b918e.TMP
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5b918e.TMP
                                                                                                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                                                                                                      • SHA256 b931b324b2851b1204497b722bba8c8a06585642c1e835208e9c2d8f11918336
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      5cd93bc3-e727-4d29-b886-5a6b51766089.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\5cd93bc3-e727-4d29-b886-5a6b51766089.tmp
                                                                                                                                                                                                                                                                                      • Size 13B
                                                                                                                                                                                                                                                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ScriptResource[1].js
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\AWDM8393\ScriptResource[1].js
                                                                                                                                                                                                                                                                                      • Size 100KB
                                                                                                                                                                                                                                                                                      • SHA256 47e4ee744c576fe52fe74a169a738169a4505bc6ec35fadf26784ff68bd81a3e
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      font[1].eot
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\AWDM8393\font[1].eot
                                                                                                                                                                                                                                                                                      • Size 43KB
                                                                                                                                                                                                                                                                                      • SHA256 c0d92b06aaeb51a73c97971473a25593f14a8917d37490f46b7500fdfd487b8d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      font[2].eot
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\AWDM8393\font[2].eot
                                                                                                                                                                                                                                                                                      • Size 50KB
                                                                                                                                                                                                                                                                                      • SHA256 9696c6c9cc9ba1f158c73344ff3898cf9e0f98c1e2afba12d41e8ca1072bac43
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      custom[1].css
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\JR8JNGKT\custom[1].css
                                                                                                                                                                                                                                                                                      • Size 253KB
                                                                                                                                                                                                                                                                                      • SHA256 fe3f87f7f36d7c6e8d643c0ccde9743e304f8ce65ac1771130664f3119150dbf
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      POicon[1].bin
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\O53PBNRW\POicon[1].bin
                                                                                                                                                                                                                                                                                      • Size 4KB
                                                                                                                                                                                                                                                                                      • SHA256 20b0f94844860501e115fccd5c1462b2e2c932041d7989dc51c6d885b3429d8a
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      css[1].css
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WZCPA0V7\css[1].css
                                                                                                                                                                                                                                                                                      • Size 775B
                                                                                                                                                                                                                                                                                      • SHA256 75bb7ee1ae1a9ee37e382b9904933a08febebddad94a7cfb700c9a7a53876576
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      data_2
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\data_2
                                                                                                                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                                                                                                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      data_3
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\data_3
                                                                                                                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                                                                                                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      OperaGX_45561533.exe
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\OperaGX_45561533.exe
                                                                                                                                                                                                                                                                                      • Size 3.9MB
                                                                                                                                                                                                                                                                                      • SHA256 df36866786ec40014cb81b73e99006634dfe6dfe9bc4781f0b549b03a26b953c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      131.0.5877.57.manifest
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\131.0.5877.57.manifest
                                                                                                                                                                                                                                                                                      • Size 225B
                                                                                                                                                                                                                                                                                      • SHA256 27d41beb9333c75e0747ab435b5d9cf363fa412e030988592bda09a7a3b81d28
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      150x150Logo.scale-100.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\150x150Logo.scale-100.png
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      150x150Logo.scale-100_contrast-white.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      150x150Logo.scale-140.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\150x150Logo.scale-140.png
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      150x150Logo.scale-140_contrast-white.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      150x150Logo.scale-180.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\150x150Logo.scale-180.png
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      150x150Logo.scale-180_contrast-white.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      150x150Logo.scale-80.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\150x150Logo.scale-80.png
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      150x150Logo.scale-80_contrast-white.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      70x70Logo.scale-100.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\70x70Logo.scale-100.png
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      70x70Logo.scale-100_contrast-white.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      70x70Logo.scale-140.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\70x70Logo.scale-140.png
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      70x70Logo.scale-140_contrast-white.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      70x70Logo.scale-180.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\70x70Logo.scale-180.png
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      70x70Logo.scale-180_contrast-white.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      70x70Logo.scale-80.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\70x70Logo.scale-80.png
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      70x70Logo.scale-80_contrast-white.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                                                                                                                                                                                                                      • Size 901B
                                                                                                                                                                                                                                                                                      • SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      CChromaEditorLibrary64.dll
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\CChromaEditorLibrary64.dll
                                                                                                                                                                                                                                                                                      • Size 145KB
                                                                                                                                                                                                                                                                                      • SHA256 279fa0f72c6a117846a73556501e2ee5a1b5a0462445570289c6179e7109d4f4
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      CUESDK.x64_2017.dll
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\CUESDK.x64_2017.dll
                                                                                                                                                                                                                                                                                      • Size 474KB
                                                                                                                                                                                                                                                                                      • SHA256 42067e10be262c0996b28a88079688cd17d3ae775fb40e2aa4f65adfd25358ec
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      assistant_package
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\assistant_package
                                                                                                                                                                                                                                                                                      • Size 3.5MB
                                                                                                                                                                                                                                                                                      • SHA256 3b0745fcec05c2d55c12c833f440bd41052bee820077ee3bcd6f81721887b8dc
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      d3dcompiler_47.dll
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\d3dcompiler_47.dll
                                                                                                                                                                                                                                                                                      • Size 4.5MB
                                                                                                                                                                                                                                                                                      • SHA256 abd5436f1a8f7526ce995380ca6a6d76cbdc1a6d00127bd5016d312a79c74e5d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      dxcompiler.dll
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\dxcompiler.dll
                                                                                                                                                                                                                                                                                      • Size 24.5MB
                                                                                                                                                                                                                                                                                      • SHA256 249f775e5335e6c2eb524c954643d542500bb68e3aeaf1437ad8e06cd117f624
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      dxil.dll
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\dxil.dll
                                                                                                                                                                                                                                                                                      • Size 1.5MB
                                                                                                                                                                                                                                                                                      • SHA256 e7cbbea545c9030290965b3ffeadd95f0d5fe94cb8e6ed4e3bde9110eea9d3f7
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      files_list
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\files_list
                                                                                                                                                                                                                                                                                      • Size 4KB
                                                                                                                                                                                                                                                                                      • SHA256 53d6e77fafb6576432417d01728f559478375d8c997a42e9145c740552cbc5bc
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      headless_command_resources.pak
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\headless_command_resources.pak
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 19f8d4e066ff126f07cc2b0e5fa9788b5b5b9a6eb790dc8fc0a8899ca7a300f0
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      icudtl.dat
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\icudtl.dat
                                                                                                                                                                                                                                                                                      • Size 10.4MB
                                                                                                                                                                                                                                                                                      • SHA256 92cbfb1c00ee305e4d085ef609c346795a1c13bf03d48c1a9dfc80d61a1e9ebc
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      installer.exe
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\installer.exe
                                                                                                                                                                                                                                                                                      • Size 9.1MB
                                                                                                                                                                                                                                                                                      • SHA256 574bfe860ff9106ac64702670adbffcc411a35ed998a640e2334adfe2bb164e3
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      custom_partner_content.json
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.57\resources\custom_partner_content.json
                                                                                                                                                                                                                                                                                      • Size 245KB
                                                                                                                                                                                                                                                                                      • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      browser_assistant.exe
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                                                                                                                                                                                                                                      • Size 5.2MB
                                                                                                                                                                                                                                                                                      • SHA256 4a44c678398145b0582ef30d245fc6f23f5492fad30fd9483fde5a7dddb9741a
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      opera_autoupdate.exe
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                                                                                                                                                                      • Size 7.1MB
                                                                                                                                                                                                                                                                                      • SHA256 2401791daa0f0f045551beb747cacdb9679ce46f35bb943f0202354cae9f41d0
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      installer_prefs.json
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 acb55aa82c390837a5fef2711bc747e996e0c15ff095a9b0feb187e267b51aad
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      opera.exe
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                                                                                                      • Size 2.6MB
                                                                                                                                                                                                                                                                                      • SHA256 0357e9d40fa1cd89fe6036d1503bfd4dbcf4b7d5c8e521c951126529a991fba9
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Opera GX Browser.lnk
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\Opera GX Browser.lnk
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 b4d133be1711551a91392cfc10839470550c42e824d8a2445d7fbb6d3b161c6b
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      additional_file0.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\additional_file0.tmp
                                                                                                                                                                                                                                                                                      • Size 2.8MB
                                                                                                                                                                                                                                                                                      • SHA256 aea99ad410a597e74390c1a4c41fd8b9a0847c555e62538f20690bc4f5081073
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      assistant_installer.exe
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\assistant\assistant_installer.exe
                                                                                                                                                                                                                                                                                      • Size 2.4MB
                                                                                                                                                                                                                                                                                      • SHA256 e47c83fe3e201c5d2e39f068a59b75dc4c640bb2d77e330b00f2f7de47c5a264
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      dbgcore.dll
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\assistant\dbgcore.dll
                                                                                                                                                                                                                                                                                      • Size 196KB
                                                                                                                                                                                                                                                                                      • SHA256 4a2e6daaac3c2f30d5d50ff17d758c7872149d852eba4fc8249682da49cba611
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      dbghelp.dll
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\assistant\dbghelp.dll
                                                                                                                                                                                                                                                                                      • Size 1.8MB
                                                                                                                                                                                                                                                                                      • SHA256 4ffe74dd53a715011655419a9fb741a0699b4fe722768cee8267016fa931140a
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      installer_prefs_include.json
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\installer_prefs_include.json
                                                                                                                                                                                                                                                                                      • Size 357B
                                                                                                                                                                                                                                                                                      • SHA256 c736f88aeaeb4c03e7f88a392217c0caef094a6fd5b407d3c3330254f3bc4f0c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      installer_prefs_include.json
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\installer_prefs_include.json
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 597a166a174a0ca7ec171402ec991ccbb2f599c2cf1e225bb94bb271bcec8c3f
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      installer_prefs_include.json.backup
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\b8b69146-0c67-40ed-9294-70246008d722 Opera GX Installer Temp\opera_package_202605221414431\installer_prefs_include.json.backup
                                                                                                                                                                                                                                                                                      • Size 342B
                                                                                                                                                                                                                                                                                      • SHA256 743c416fad4fff399ae3636e0991d73c3e3733718831fd8781c8d9e0a31a9de9
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      07456452-91e6-44c9-8955-0e0c518082c0.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\07456452-91e6-44c9-8955-0e0c518082c0.tmp
                                                                                                                                                                                                                                                                                      • Size 1B
                                                                                                                                                                                                                                                                                      • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      installer.exe
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\7zS43E53C28\installer.exe
                                                                                                                                                                                                                                                                                      • Size 9.1MB
                                                                                                                                                                                                                                                                                      • SHA256 69bdbb8a932cde8ec4c47501dad116e0b01870f512685acda4a19c758ff29750
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      9ba1e911-1a5d-4034-b6fc-3566937249c1.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\9ba1e911-1a5d-4034-b6fc-3566937249c1.tmp
                                                                                                                                                                                                                                                                                      • Size 14KB
                                                                                                                                                                                                                                                                                      • SHA256 1063c0cf8fa368edbeb9d05655366387b9b4c5c4e30b6d124ff31ea4517a6b3f
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ContentI3.exe
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe
                                                                                                                                                                                                                                                                                      • Size 3.8MB
                                                                                                                                                                                                                                                                                      • SHA256 ef2734657b11113a433abb7ebac962e2bf6bf685f05c5f672997f01875430168
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      __PSScriptPolicyTest_ondklxma.kjb.ps1
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ondklxma.kjb.ps1
                                                                                                                                                                                                                                                                                      • Size 60B
                                                                                                                                                                                                                                                                                      • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      d32e2bf4-e84d-4be1-9b28-edb32d15b165.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\d32e2bf4-e84d-4be1-9b28-edb32d15b165.tmp
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      content_new.js
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1084_1529085677\CRX_INSTALL\content_new.js
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      7c263699-16f1-4a5e-86c1-9e548a81940e.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1084_1637022645\7c263699-16f1-4a5e-86c1-9e548a81940e.tmp
                                                                                                                                                                                                                                                                                      • Size 147KB
                                                                                                                                                                                                                                                                                      • SHA256 d766e75ceffe993aa1dadd5619b24043a0ebe9a9689a6796d19d88bf952683d4
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ba684a72-e0b8-4aed-a26c-dbc047a4e8d8.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1632_1745735299\ba684a72-e0b8-4aed-a26c-dbc047a4e8d8.tmp
                                                                                                                                                                                                                                                                                      • Size 472KB
                                                                                                                                                                                                                                                                                      • SHA256 791c81ca1b16b333a947dc63cc0dee14aba5a4f82a7fd5379e42ed40bea8c41e
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      cos-bridge.js
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1632_1839613494\CRX_INSTALL\cos-bridge.js
                                                                                                                                                                                                                                                                                      • Size 173B
                                                                                                                                                                                                                                                                                      • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      cos-content.js
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1632_1839613494\CRX_INSTALL\cos-content.js
                                                                                                                                                                                                                                                                                      • Size 502B
                                                                                                                                                                                                                                                                                      • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      messages.json
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1632_1913362405\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                                                                                                                                                      • Size 429B
                                                                                                                                                                                                                                                                                      • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Icon_Light_Neutral.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1632_1913362405\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                                                                                                                                                                                                                                                                      • Size 962B
                                                                                                                                                                                                                                                                                      • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Icon_Light_Neutral.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1632_1913362405\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                                                                                                                                                                                                                                                                      • Size 932B
                                                                                                                                                                                                                                                                                      • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1632_1913362405\CRX_INSTALL\manifest.json
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 b655477791478d7f6f560c740fcd142b504c7f3a73093031a3257abc43fd95ce
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      popup.js.LICENSE.txt
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1632_1913362405\CRX_INSTALL\popup.js.LICENSE.txt
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      904de39b-1592-42f9-897c-349cc8bd69d1.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1632_604668083\904de39b-1592-42f9-897c-349cc8bd69d1.tmp
                                                                                                                                                                                                                                                                                      • Size 4.1MB
                                                                                                                                                                                                                                                                                      • SHA256 40f9e8081dc6cdf8dfbd563f63fbbc3799aea3b14fa13d44f1dc37b7e8293048
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      favicon_opera_one.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1632_604668083\CRX_INSTALL\favicon_opera_one.png
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      messages.json
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1632_956789563\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                                                                                                                                                      • Size 396B
                                                                                                                                                                                                                                                                                      • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Icon_Light_Neutral.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1632_956789563\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      rules.json
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1632_956789563\CRX_INSTALL\rules.json
                                                                                                                                                                                                                                                                                      • Size 839B
                                                                                                                                                                                                                                                                                      • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      e5ea4655-b439-453b-acdd-3b2bad1b9afd.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1632_956789563\e5ea4655-b439-453b-acdd-3b2bad1b9afd.tmp
                                                                                                                                                                                                                                                                                      • Size 2.6MB
                                                                                                                                                                                                                                                                                      • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1632_976277865\CRX_INSTALL\manifest.json
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 b19b1ebae315de34968048f3b4b42fbcef9ef2ec5a7554a7776901f4a74a5823
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      pmls64.dll
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\~osADA7.tmp\pmls64.dll
                                                                                                                                                                                                                                                                                      • Size 1.1MB
                                                                                                                                                                                                                                                                                      • SHA256 877c2894f42bf078dfa36f06b543490d800a32c4f5245464bfec300b56867661
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      pmropn.exe
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\~osADA7.tmp\pmropn.exe
                                                                                                                                                                                                                                                                                      • Size 7.4MB
                                                                                                                                                                                                                                                                                      • SHA256 b8e134c1518903be8b260f821d1896b521f7f70956090562b3cc71b71bf8cb1b
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      pmservice.exe
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\~osADA7.tmp\pmservice.exe
                                                                                                                                                                                                                                                                                      • Size 4.6MB
                                                                                                                                                                                                                                                                                      • SHA256 f76c45ac8440c5a36096d7956bdf933bfff268469d1a73573c7f001f790dafa1
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Opera GX Browser.lnk
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera GX Browser.lnk
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 8e22eed6e47f1df580c5e52218ec5c5703e05b8f9e4411261626b18cf890e6e2
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      default.dic
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                                                                                                                                                                                      • Size 2B
                                                                                                                                                                                                                                                                                      • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      a699adf11b9f24db.customDestinations-ms
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\a699adf11b9f24db.customDestinations-ms
                                                                                                                                                                                                                                                                                      • Size 21KB
                                                                                                                                                                                                                                                                                      • SHA256 284230d3682a3820383d46934e6a6938cec69c2bb3d937b3b912da71d3116bf8
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      a699adf11b9f24db.customDestinations-ms
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\a699adf11b9f24db.customDestinations-ms
                                                                                                                                                                                                                                                                                      • Size 21KB
                                                                                                                                                                                                                                                                                      • SHA256 ebbebd5ba297087564ab71d471e1756b632df9a4b4c97eb1d720da835276a639
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      settings.dat
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                                                                                                                                                                                                                      • Size 40B
                                                                                                                                                                                                                                                                                      • SHA256 4e8c8382767eed16985ea83b0923ec037dcd4ea67588ab8c2ce41f3eb8a12735
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      1aaf80fa-ab4c-4819-916b-32e35369702e.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\1aaf80fa-ab4c-4819-916b-32e35369702e.tmp
                                                                                                                                                                                                                                                                                      • Size 162KB
                                                                                                                                                                                                                                                                                      • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 03c7efee3f58fb8b52abacc587d5791e6ea4d7fc1af31f91e28ab4d11d0c1f76
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      the-real-index~RFe5a951d.TMP
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index~RFe5a951d.TMP
                                                                                                                                                                                                                                                                                      • Size 48B
                                                                                                                                                                                                                                                                                      • SHA256 f0920f90e17e12c04918526df04c88c99512badd47be321ef2c8e47cc309b4c9
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      CURRENT
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Scripts\CURRENT
                                                                                                                                                                                                                                                                                      • Size 16B
                                                                                                                                                                                                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      MANIFEST-000001
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Scripts\MANIFEST-000001
                                                                                                                                                                                                                                                                                      • Size 41B
                                                                                                                                                                                                                                                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      messages.json
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.30.0_0\_locales\en\messages.json
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      background.js
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.30.0_0\background.js
                                                                                                                                                                                                                                                                                      • Size 17KB
                                                                                                                                                                                                                                                                                      • SHA256 7c44c782b5e658ceeb46850ec34e316a90d1010d034706f6e5a980f48b8f1398
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      twitch16.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.30.0_0\icons\twitch16.png
                                                                                                                                                                                                                                                                                      • Size 370B
                                                                                                                                                                                                                                                                                      • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      twitch48.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.30.0_0\icons\twitch48.png
                                                                                                                                                                                                                                                                                      • Size 921B
                                                                                                                                                                                                                                                                                      • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      main.js
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.4_0\main.js
                                                                                                                                                                                                                                                                                      • Size 47KB
                                                                                                                                                                                                                                                                                      • SHA256 6aa809057957dd9c15900268b817b8ca0f87e0254086f80dbc58fa5b824819b4
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      blacklist.js
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.40.0.2_0\blacklist.js
                                                                                                                                                                                                                                                                                      • Size 76KB
                                                                                                                                                                                                                                                                                      • SHA256 2e92c867e0f9270920173424b5228659a13124b54132496585021f27435e2643
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      common.js
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.40.0.2_0\common.js
                                                                                                                                                                                                                                                                                      • Size 1.7MB
                                                                                                                                                                                                                                                                                      • SHA256 153aa2e2c8b555c2edeb667819dd6469dff3ba6c74b89e02e686fc7208a9bb6e
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      favicon_opera_one.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.40.0.2_0\favicon_opera_one.png
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      service_worker.js
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.40.0.2_0\service_worker.js
                                                                                                                                                                                                                                                                                      • Size 65KB
                                                                                                                                                                                                                                                                                      • SHA256 1124b7bb71e5ab4f4a81df623d8e9e1e831e0248fa0dd416dd4c55c04bbe75c5
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      vendors.js
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.40.0.2_0\vendors.js
                                                                                                                                                                                                                                                                                      • Size 2.3MB
                                                                                                                                                                                                                                                                                      • SHA256 81fd470e0987716ce71e2a22621a3e840eb3a113644ae1d006bdf81d288cfa88
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      webpage_content_reporter.js
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.40.0.2_0\webpage_content_reporter.js
                                                                                                                                                                                                                                                                                      • Size 113KB
                                                                                                                                                                                                                                                                                      • SHA256 037a9f1fc827596e3065cb719cf21d57c744d9a44feb8afbaab9f2790205c3c6
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      background.js
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                                                                                                                                                                                                                                      • Size 86KB
                                                                                                                                                                                                                                                                                      • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Icon_Dark_Active.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Active.png
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Icon_Dark_Available_Red.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Available_Red.png
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Icon_Dark_Available_Yellow.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Available_Yellow.png
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Icon_Light_Neutral.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Icon_Dark_Active.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Active.png
                                                                                                                                                                                                                                                                                      • Size 883B
                                                                                                                                                                                                                                                                                      • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Icon_Dark_Available_Red.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Available_Red.png
                                                                                                                                                                                                                                                                                      • Size 895B
                                                                                                                                                                                                                                                                                      • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Icon_Dark_Available_Yellow.png
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Available_Yellow.png
                                                                                                                                                                                                                                                                                      • Size 895B
                                                                                                                                                                                                                                                                                      • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      index.html
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\index.html
                                                                                                                                                                                                                                                                                      • Size 222B
                                                                                                                                                                                                                                                                                      • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      computed_hashes.json
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\_metadata\computed_hashes.json
                                                                                                                                                                                                                                                                                      • Size 73KB
                                                                                                                                                                                                                                                                                      • SHA256 6981ab0e6f2328f8b6f583cee4b68ca6cb8359e800387774dac97df21043e0c4
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      verified_contents.json
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\_metadata\verified_contents.json
                                                                                                                                                                                                                                                                                      • Size 6KB
                                                                                                                                                                                                                                                                                      • SHA256 7962ed372049509eb040645a6a96d37c60414647f7d7c6852d20e183d8fca45d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      manifest.json
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\manifest.json
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 4dc8cf07548e8abda9ccaed742ce955a4cce2b524abf4a2a73a5411c22aa567c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      MANIFEST-000001
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                                                                                                      • Size 23B
                                                                                                                                                                                                                                                                                      • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      12688e10-846b-4e64-91c9-5547da957448.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\12688e10-846b-4e64-91c9-5547da957448.tmp
                                                                                                                                                                                                                                                                                      • Size 27KB
                                                                                                                                                                                                                                                                                      • SHA256 9b19632a65774b14cf35bf7d0b242cba70e8b52bb6667bc6f3d0e8e203048dd6
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      1b7824c2-6204-4842-9e5f-ae1de30af468.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\1b7824c2-6204-4842-9e5f-ae1de30af468.tmp
                                                                                                                                                                                                                                                                                      • Size 27KB
                                                                                                                                                                                                                                                                                      • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      6bfb2b39-217e-45a8-aff2-c476067858de.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\6bfb2b39-217e-45a8-aff2-c476067858de.tmp
                                                                                                                                                                                                                                                                                      • Size 27KB
                                                                                                                                                                                                                                                                                      • SHA256 f7654bd59a0eca449dce5ce6140898342904778a307f45461436ad5a24ee913e
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      7ee4d979-f400-47de-8a46-06619c5341fb.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\7ee4d979-f400-47de-8a46-06619c5341fb.tmp
                                                                                                                                                                                                                                                                                      • Size 27KB
                                                                                                                                                                                                                                                                                      • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      936a5f8e-a1fa-4aeb-98f1-780ac678828c.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\936a5f8e-a1fa-4aeb-98f1-780ac678828c.tmp
                                                                                                                                                                                                                                                                                      • Size 27KB
                                                                                                                                                                                                                                                                                      • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ddea0886-4a00-42d7-96ac-ab46f38921e0.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\ddea0886-4a00-42d7-96ac-ab46f38921e0.tmp
                                                                                                                                                                                                                                                                                      • Size 27KB
                                                                                                                                                                                                                                                                                      • SHA256 c5b282a24d9ef3ca8b9ec9a229d76f55e76c8765f3d55b13ae9d0f6501c7b0fd
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                      • Size 5KB
                                                                                                                                                                                                                                                                                      • SHA256 7b849afb9d4646f6c66ac7b9ecce2034f9bc94c50082c07108fa070a537a2a7c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Network Persistent State~RFe5b3f19.TMP
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State~RFe5b3f19.TMP
                                                                                                                                                                                                                                                                                      • Size 59B
                                                                                                                                                                                                                                                                                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 a7fa5d24cb35a4f518343215ac795d14d96c774393e4226d9d0c6b40a515b51c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 cc27a92edc48645fb212a430eb555f1b5b05c3672a61bd6f55194f06606f6101
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 c1944d5df6b1b1fa369bb8a475eb522fb1190d98597976ee86d22efd94675c0f
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 db50dee61ebd60562099d485355e4f12853362fd1860964cdcc24b79da830db6
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Preferences~RFe5a3b26.TMP
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences~RFe5a3b26.TMP
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 bb3b930312ad1ab3b47730c48caa890c38cf5c9ed375ba23c2e40dab5f8ae532
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Secure Preferences
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                                                                                                                                                                                                                                      • Size 199KB
                                                                                                                                                                                                                                                                                      • SHA256 6772f12d14eae1b6c05b69574d844559c07dff7ac9093e0c4717f84948901637
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Secure Preferences
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                                                                                                                                                                                                                                      • Size 213KB
                                                                                                                                                                                                                                                                                      • SHA256 1ce0ece548ac6644406129e6268d64eb96af2b699c329e4677e608fa0702ca00
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Secure Preferences~RFe5a3b74.TMP
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences~RFe5a3b74.TMP
                                                                                                                                                                                                                                                                                      • Size 84KB
                                                                                                                                                                                                                                                                                      • SHA256 cc8ce0e14d48087d8ec667b911d8524440e3f2c80cd2132f5860ec0fd8475841
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      index
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\46701fbf-7116-46e0-87e7-d887b351c01d\index
                                                                                                                                                                                                                                                                                      • Size 24B
                                                                                                                                                                                                                                                                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\46701fbf-7116-46e0-87e7-d887b351c01d\index-dir\the-real-index
                                                                                                                                                                                                                                                                                      • Size 144B
                                                                                                                                                                                                                                                                                      • SHA256 e830167b84f1938f5f804c57b191af8823a37c107ec6837069050c490e12961b
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      the-real-index~RFe5a8bf5.TMP
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\46701fbf-7116-46e0-87e7-d887b351c01d\index-dir\the-real-index~RFe5a8bf5.TMP
                                                                                                                                                                                                                                                                                      • Size 48B
                                                                                                                                                                                                                                                                                      • SHA256 cc7c8dcbaa9dbf91a9d44fe26bf04dfa1b9c4c33716815c812800562c08999cc
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\d5d5d5ac-4213-4277-baaa-edd537e6596a\index-dir\the-real-index
                                                                                                                                                                                                                                                                                      • Size 96B
                                                                                                                                                                                                                                                                                      • SHA256 59b1940562f4361351b0a2016d5e9609281521138cac509fe1b588f84da6fd04
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      the-real-index~RFe5a8cc0.TMP
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\d5d5d5ac-4213-4277-baaa-edd537e6596a\index-dir\the-real-index~RFe5a8cc0.TMP
                                                                                                                                                                                                                                                                                      • Size 48B
                                                                                                                                                                                                                                                                                      • SHA256 62c33fad5c4cb467cf465ce32f97299c0ccfa18cb1d97260864b806476f900ee
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
                                                                                                                                                                                                                                                                                      • Size 208B
                                                                                                                                                                                                                                                                                      • SHA256 060e97835c838ca17f92230d4518b3da8b08f3250c6be289e161e5f8024f75b4
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
                                                                                                                                                                                                                                                                                      • Size 203B
                                                                                                                                                                                                                                                                                      • SHA256 03f94acf55fd07107ac70a2905aab28ae8a551f0ac9f8cf09dd2cdac0e1cca2b
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      index.txt~RFe5a3e14.TMP
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt~RFe5a3e14.TMP
                                                                                                                                                                                                                                                                                      • Size 141B
                                                                                                                                                                                                                                                                                      • SHA256 861522a1a9dbed31023b61d352b7fc990b5942e3b0aae5889dec15ba4adf7cdf
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                      • Size 456B
                                                                                                                                                                                                                                                                                      • SHA256 08f3da7574081b94500ed6c624e6027705732b797d9811af137b9caf00ed93ff
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                      • Size 456B
                                                                                                                                                                                                                                                                                      • SHA256 11411eb290b3e7471c215f5b4808f64f88718f8730ff0b5a86c5ec84b0993115
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                      • Size 456B
                                                                                                                                                                                                                                                                                      • SHA256 7991cd7759bffbe6de9ea65b5fe1455d0bc5fd076434599aa0d98c9d1a238ecd
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      the-real-index~RFe5a9106.TMP
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a9106.TMP
                                                                                                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                                                                                                      • SHA256 6f1b1b19d3aaac0fed532d073ab9b37c2b59ce285ed02c10d15310bea19e79c9
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      880c270a-4607-48de-9b8d-dc0d8609da63.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\880c270a-4607-48de-9b8d-dc0d8609da63.tmp
                                                                                                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                                                                                                      • SHA256 746613e64aadc316d3e737a48e59e4de3c2b00047dc818fcee5301fc0c22355b
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      f20c8bd6-2584-4745-b47b-7fcd130f453f.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\f20c8bd6-2584-4745-b47b-7fcd130f453f.tmp
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 b98253b5e14dcd33597abd87013da25454d8905285a6ab47c13a6952dcc078c8
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 14KB
                                                                                                                                                                                                                                                                                      • SHA256 75862230d9ff2735b07c9d690955742a3015ced29b8cf34239a1d42ba761d228
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 14cc722d5506b68bb5612b970c06f74d52b43979a062cffaa7966bf320b86995
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 953cbce589ff08035743d02a26030313c10b4b01d939295b57f556d5550cb5ab
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 89d06599b6ff1b9a27274bd476f809cdd70d24595914599da6692405fa14a917
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 6441d22b12399240cfe70e62e2de247321f64fb3fc0f54357decd8de51d890af
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                                                                                                      • SHA256 9ad4549c764dba4d36c730e2a556d2541c4c91b60b812ccad0b8b03575dc80aa
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 dabe52cff32d24a51d1ce417d813c87490c37a1a3291f935f05dc4cb096d7c1e
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 3a8d2c79cda824973e0ef6aa0a396f32af6399e538cf93fe5d28413a104af1b2
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 f986552f4c4c71b67d3c877ec44a8be81a626da5a0023faedef72585b5316ea5
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 4621e9bead429b7818792f26b1df1c9691700245af1e575b578d8ce1b8294c3d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 14KB
                                                                                                                                                                                                                                                                                      • SHA256 e438e029d0c27658600c4b70a4cbbd37bf0a2b51a2a638cd97d7cde4f0b55db0
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 14KB
                                                                                                                                                                                                                                                                                      • SHA256 635ad1acfdafa672843d85612a8234dc4ca92810a080c3313afa76776c689042
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 11KB
                                                                                                                                                                                                                                                                                      • SHA256 ceaaa136b205c1d538b841d3e2a6c2ca1fc4ee23d79ee93c64a42bbd06e2d0ef
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 c6bdc10385ece371db7ee99c5e600ec85b6a6171ba5cc5dd764128b6411da429
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 214f195c112a45639573aab34ef436f9956261d777e9051ce0c44a7398674f25
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 d8e11e1f74d8556bfccaaf2555fdc4d1671e0d396945059954eedcaf382c67b7
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 e0b0932ef3f85dd2255c40cdc1c6f84a4769ec064f3e729abd03603dc52ffc2f
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 3c83eff8cf8f80e24bea85456332c9907d8eabcb7db04b46ccca314f348693b6
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 2ab58a71db00d17db701bca9b874f1f98c531d5b30bbf4535a64a113732acfd8
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 14KB
                                                                                                                                                                                                                                                                                      • SHA256 7268f13a70e5630197aa4670b9c7addc5f30e684a6459d89888e6cfee3184337
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 541B
                                                                                                                                                                                                                                                                                      • SHA256 fa2f00b28ec70165a4c5c030eda34ba03a2ee4bd58ea173391bfe9aa21afbb90
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 653B
                                                                                                                                                                                                                                                                                      • SHA256 395c809925b73973ee566e48704f3fcb123aa8af28a22307512d2099b32a71b0
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 ab4f0f105124181230cbf21fbc173edf3428ae1c381b7777e288bc08bf235d7d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 f07065ddd98034b30ea7573bd807ae65a32744178af832de9f504e170acd2c93
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 5fd9b9ead0e84eb56c5373b801c4b65ab8dd0a1422f711e9a388ed8a64d47915
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 e446c1088c4aa269ef9cecdfbfb9f4009dbaa7abe6bfba501746be71140598ea
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 11KB
                                                                                                                                                                                                                                                                                      • SHA256 4a92305fc58b35cfdadabe3041cfb45337af153d3958ebda0d06bd2225b62367
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 11KB
                                                                                                                                                                                                                                                                                      • SHA256 a50054d9db1da21a030a2846b3bfa97aadfb4d8a2f427a00ffb46cc2ceeba4c8
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 11KB
                                                                                                                                                                                                                                                                                      • SHA256 77601988d9804ae44fa88e1f137b860c6b41c0e73a372660dce60ab4b2b026df
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 11KB
                                                                                                                                                                                                                                                                                      • SHA256 ebf538079dc7cff38ad8d7e723f4b675664dac1b6d05fa68b7c3add0ba21cbae
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 fb8df7a9d940d7a37ada22f1510638a6bc76cdf5cf371f9895018dd97977adbd
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 0294f43379b12b1e64fe3e135dcd32c586e31546f5e4c594cb5ff202c7ae2da3
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 44d3b1ea37e09187e5da6498851642916d27e75a91f0b8020b58e47148c5cca5
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 d89203c5bf8b47f10fccdbc547a1edec81b61ce6ae0d4002ba631c4532008d5a
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 127406624b3740037ba7de75116d22c2e6dfc811b54b9b1e27cb9a1f0b14b50d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 70c00a07f012730d9d068a5b1b14506e7238973da0db8b3a86ae82ed50eb8c61
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 f4bdfab20a4a805f4de139d8d8cb70ea648b239038793f99e6bd3c43ff2ec9da
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 14KB
                                                                                                                                                                                                                                                                                      • SHA256 f2191031964a535fdb6e6c67f66f39e7ac37964d07eb254775ab3d574531d8d5
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 86800309e13af2879505d9b600c7bf4cba2d8bee1c44baea9e674d2650190fc9
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 781B
                                                                                                                                                                                                                                                                                      • SHA256 3bdb61532b6c5a36ea9fa616408faf9f5c80820192f813768d35e43a81f3d716
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 957B
                                                                                                                                                                                                                                                                                      • SHA256 88cdf8f59e3cf3bcc98b7721effe3ae3049a4307cdc75a3504581317f7dcd574
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 efea674578a9804d661654b7f72c7e4feb5a638f76e8b929132da225aee97926
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 e0d07602a678e0cdc7debb26bb1c717340a60ffac2677a1cdb8d3f33c270801a
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 e8b3d0c83f0dc01b9b08512ba96354c3178fe358db6ad93a3a91cea897b88877
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 9f447a9225f3edbf4be4419023d098a20b537dfb2306ff0fb32a99f8086338b8
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 314e58f836cb25b0bd1079d4490cbf1c4416ccee7224007da619adcdeba99a2b
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 26ee83bb5b5502761411396e385815d89be3b0a36ef08aa6d01dfda4f78ebd73
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 eced66da7b5ca6232596ffdc6ea09bb915d7c0ddd478d21200def583faaaf3d5
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 df2bfd85a8ecbdad8e60edf927c5363294fe36cdc8b4e576a5243d3775fb5385
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                                                                                                      • SHA256 af9df4d47aacc0be9f3ca8750d368fde97d4e7829daca54907361bcce8c17193
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                                                                                                      • SHA256 db61a2818a3f1538b58015797015bb2025430e7f3b6ff36b589cb28670fc9d70
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 a095aede4bf1bd7bcf8f43a2f2fb1bdfd5118c12fc65a852d39a69683bd9471d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                                                                                                      • SHA256 81615b6598d6ae225f3ff2fe788fb59b7653f0f7c229e65fb8feab8f5228cbb8
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                                                                                                      • SHA256 be4ce6eefc1c6c0d58aedf0de04a486a4ce18ff18df20d3617179762807e1de3
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                                                                                                      • SHA256 60d091283184648cfedef1a0f8ad4bc958531b36527246852dac699cbb478e97
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                                                                                                      • SHA256 f6bdbb15fcf021a323d9c48095254f89c4544d04e32bab5bd5b39726860736d8
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                                                                                                      • SHA256 9aacd86f5daffe3dd8726e8452c0a2ee5c5ff9c96cd3ad59329536542a4dcf1d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                                                                                                      • SHA256 399b19c586203a3e60a48266ebdaa96ed43a34bccab9ba05d052ec01577edfb2
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                                                                                                      • SHA256 b1011b42346e8f6a73c954e50d97a65b0d5efc5392e5e3fc5f0d4fa97fafc5c3
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 cc841067558501d4453ea5d94302556db87714453f2650c47fe641c063fec9d6
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 289bbdc65ceb27b0a144ce4a59804d2784599a74647ce1a380f3539378b39b32
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 7f58dff230d0fe7edbe10f117ae42a68177e86b8a3c42cf070ae655ceec3a965
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 4f7382e078348303783d609dae94be1d7b99813c31bf8ffc2748d7d83d74821d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 53cefd9715b495bc9270b28bf5aea46c3a8587da08ee3d4b1ae2985b635b0dd7
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 2dd458d2f995f45a8b3a7a82e25022d12f0ff0fd974e7f2f544a034e147de405
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 25f875c085a99f579e9d3db29110052f0c2657f499a894e13795c3568e330a10
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 478a7a0d065b8c61d25e215fdd8f9e88ea1d278ce25e70b347dc892de1c415b8
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 5f7d70900cf146b550b608405cb7ad1f2bd78d96ef70cc7168b045132a080fdb
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 4922b4292c31cb4b79d1604e82cd62215148a8a0362fbd9e305ddcad06a9a5ad
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 0c8140919095046b1098f5ccfc1775213373f3d5404ef299828c9d46bb9a907d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 11KB
                                                                                                                                                                                                                                                                                      • SHA256 685ac431a260a275251e519426dd3410f6f87e1cddb9d3e21201ba632457973a
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 717fb3e0a2e614c71665845b3b2aad81084c75dd0bb0096b4927bc40cd88edaf
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 8640e4628708f1913ff0ac74754b6010c838bf3f9b5b20675c408809e2024214
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 18598586cd6846d88bb54210e4bd801180cc5022a630c225ea7c05b86fe1069a
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 14KB
                                                                                                                                                                                                                                                                                      • SHA256 8f66932cab5b80c748e88992950cd92787890a3d65e0372c01f46bd5fbc208c0
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 f31ded2f30d9749c757837e698b9d6750865601df8f8204cd4dd3dc56b3e8cdc
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                                                                                                      • SHA256 0c8a6a25824040ea1de53de249748d823a3733d0b00570d76d22d4dc60455b1a
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 fa090c7f0d361e81b1f4c4f6204260c3164cb9307289d98406df51df47c24bd4
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                                                                                                      • SHA256 05b96efa174456c7c2d4f54a384f8c6d345c328d7402802ed87ec18d992581c5
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 11KB
                                                                                                                                                                                                                                                                                      • SHA256 25945ab4dec3d4320937991deb0dce9d3013b6d51d51df18618faa0cde9ca57d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 559bfeb2a897d417de93dd0a5e5b606407db3c16959807631eba793e7fe7864f
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 53ba5f2ad4a5fc455a6fb5334f75259579f91d20f297cdd11e63497bfb605ff8
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 c3313cfed77c4b7ed27f8f22efc2e87c2194fbcfdc6038664fa89fca6907564c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 d0cb4915fd0e9220a421074a7e45d325d7c49fde5d1f842e1aedf630718b9a9e
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 792c5499f740a627b9a2407ba3221fe17b232bec14769f2b05f48a37f0a3cf88
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 b38f78d0692d8d6f9e4d07b89460290709b226084147bfed61df51c9f883f658
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 d93b01b41b822498a89d6966be6992eab43597191ba1fd28851f6b23b9166e14
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 b8fe73f773e87c2309bd439061a9a7038c19254da9aa6c00d5e32590b93d0eea
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 11KB
                                                                                                                                                                                                                                                                                      • SHA256 e414729a6babcaf1824f10ecca10e1ae2e0b1e675c42ef79bf918fef8f3a74d7
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 0e83821a536c71b2fba6a8a6e1057f90b404a91bbdf192cf40683fd1857cc16c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 7eeebc406e1bb975adc2fe9c23dfc8e9c56b94678016c5f8bd6bc8b71e47d19c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 91cb2a171b06a514b058a22306ebc744f7b71770401ad67ce272ae97e8b1bb0a
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 f8b0b82a8970ae1ddf5437d7df8370f5790bacb366d9adf30432a38f691b10c9
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 a9d092a17a722d0261dcbc6b030f3493d57af5c063d93e59e84aae5e9c33e701
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 24bc4ea3990aae3b9ee59af1db0afb2d6d20c4482edacd4795b8cc7ee44c9f60
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 f1d48bf20f233f9d642f17eb1abf4a41a8bac543af3b504692071f947417703b
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 7de265725f55e486e613efddff6a4ff7266b160df98e0cb622bf0cd757c01fa7
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 208fb136f5a50afdfba101a2e43e7308190a832fb77333314f5f00b8d122735b
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 9c1be9ea5800b6e1c22a910e81baf2a3ccea228eb6b7683bdbcdd8823a91ccee
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 b2eda85a46260e53caf2b5a247386d5f4458d25c7b6315b7ad495018f618155c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                                                                                                      • SHA256 73a705f6617bf9f8fdcc7c9d7ef74b14cd31cc7a037fc0dd657174b9a7dbbe76
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 686b55a24187315b40305a6e56655ee5156ace0c8c9282a9a9272a33906bec09
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 dd9afd646af9a2ecb8f05ba2e7105b4d5087a259646563dd1893fc45e3ca2711
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 6e03a3371233f84edd16a1853cf27ae1f6a84c122cecec1f2498ba4970d6fed0
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 2ab171edc9c0ec28854ee47cc5f0101dead80585c4795c8a3234cdefa4f305fa
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 979e3fe0301e2988d9d1aceac500db235762ab35b6c871e8b345842d6d618741
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 c2c5834f33c04d525a60fa801e658bbae1af7416e599496e5d6d30369d2c1251
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 8d356dc6436972b4a5aaebedd7f4a7a012f7204acdc2a14a9c9dbae080173edf
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                                                                                                      • SHA256 33a66a2da89a6595f8fe76e31b4ff873606611d1f48cf21c1b71ee81e039e723
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 6ef80e4ac6debf1a935652f9eae6588cddd655035b8aee83094730f99bec47e9
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 ed8ecb1cc403dc5301e6b77fbbe5f8533e972879363116fc927772dba18bc2d8
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 25e9a4d9afa84c6d38d25dad755276cc7782a0885da8a82664393e0a029e9953
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 6236f803f044cb2fabbe58d8770f507fb6a739fd9087a77f9a4fbc26346153c1
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 568da84282471457eb9116f3add94f9f8ebfa286d93be3196f7db56072e10730
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 71497822de49977393862abb13e7af31f2d58506a7bfa38521a08b54a26e7df6
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 9f9e8780acedfb6e655b19b01ebe6c04cf0bff048b42ce8e9c9b6ecf61602d88
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 0b863d970cf7c634694b615592c3f800af467a5873585475514d9ff2d389e75d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 7184f2ed6642ebd42de6e07377e735e9534c8f105a6d878097cdfa805f06c678
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 3221aadbc62d324c3de4261692e2fa0c0211cf7ba142b34093a5f697582bda18
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 567ce1bf39757de8f640c9b34c2a99675afb173e3c2e4883f344c6f366a89e15
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 c3fc2a27cc74c2d3aff8ce101ba1faf3fff0bc0d66bce585076d4c2c9f32d824
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 9b1b2334473b0b7e0db95dda3368a1769e606552352df58804ef4a2d2a7ed71f
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 12KB
                                                                                                                                                                                                                                                                                      • SHA256 9f8e2ec1fea0144b329fbabf5aea5a81b64b99aafa5787b3cd5767db42f7a699
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 f47a2cb14768edb95775fa746058e873d456b21b0b6f258ed5679cc3c6c83326
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 b6a70f0d07af3b9dffcc8b07a6eb3be1d95e8f3383178ca1dc7728a394a3eea2
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 ce8077920850a2029ce71a3321e56f882e7147159c917bdb9845a85bb8890046
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 4a930f3c3dafb9008da1c9b8d7c6c79a0afec95960759be50ddcc666f9edc08a
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 9331341703a55a3f746c01f34c7da08acd93410025bd7db62e07016a35c65700
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw
                                                                                                                                                                                                                                                                                      • Size 13KB
                                                                                                                                                                                                                                                                                      • SHA256 9a0836f9492ac49b87be8a2ce657f4563cb08ea8f06d049daab199966e01ea76
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      session_a556990c-68fb-4976-b70a-9a95d966ad63.raw~RFe5a133b.TMP
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a556990c-68fb-4976-b70a-9a95d966ad63.raw~RFe5a133b.TMP
                                                                                                                                                                                                                                                                                      • Size 429B
                                                                                                                                                                                                                                                                                      • SHA256 e5740d4fd7da4df3848a1a25f6252ed6fe6d6b26170c1a3ea82d8693c309103c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      a1540b95-dba1-419b-ba1e-2d442dbc1c23.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\a1540b95-dba1-419b-ba1e-2d442dbc1c23.tmp
                                                                                                                                                                                                                                                                                      • Size 839B
                                                                                                                                                                                                                                                                                      • SHA256 ab96d28e42d77d055a3529311426cf22c1be7c4ba39e64b6c5112a1ecec791e3
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      rhs.dat
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\rhs.dat
                                                                                                                                                                                                                                                                                      • Size 108KB
                                                                                                                                                                                                                                                                                      • SHA256 8dec2bc54cc475574cd9323a57be3f845e985f6239581a7dd193a7586e79422f
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 55a867ffbe11237ddd9e1e584c1043b15542ed722a74baa7513ab604e06afac4
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 507B
                                                                                                                                                                                                                                                                                      • SHA256 b69fec405940f2a4a23f18058048377babb58f592a1e17d7cd87b405ff191b9f
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 599B
                                                                                                                                                                                                                                                                                      • SHA256 e44f4990eef1f5cffa639c23638c427a3fccd7ca64765ce637ecd18691d02615
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 692B
                                                                                                                                                                                                                                                                                      • SHA256 9bb61f463ff5ebd1bf65814f1e02191be8cd9366b1ee0f1de132bb2dc948bd64
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 781B
                                                                                                                                                                                                                                                                                      • SHA256 60a7c7cdb015d763308c5fcaaa6e1e2619995612cce7f37584bf6d9822852157
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 874B
                                                                                                                                                                                                                                                                                      • SHA256 a1c9c47e02c563e3539aae0c4ba1ebd07f3f4e258cf043e84842ad2e2fcfe81c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 975B
                                                                                                                                                                                                                                                                                      • SHA256 fe35fc3b52f90f91e029aa6da31db30a12ec4ac2ec59cd1c7eea2237fdd900c3
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 bfbb5f28fd74b9ff292a5b22016c278ea105c0dacbba8d3388327243b53e5b83
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 57bc877762d5ed1f229f833e0f04101cb3ff9364a7a28f40a03f2956f55bfbaa
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 1d26256a94eeaaccec45de8b96fc958e2b4d3068ba570211e7928b51634ad528
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 93c0e0599922709bb1ca451aaf9e7138ff4899ee4d473f1b1d52739b0067f1ba
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                                                                                                      • SHA256 d62914449b779796952a57900851626cce719c652bc3f4892d1818ef22ecf881
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 f76bcc7a252b20e9631c72ec88c09e856c0c371619fce6eb15bf4fc5f4462261
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 9c98b5d41f4e65443dc054bbfe29372f827ade57c5ba33d17089b9ce49d08d69
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 6e426c97e67506b0a679f8b1908824b1b922391ff029a722dcd73e91ea74ff64
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 f34975237e5231e7457a326f29c6c245d02964df509707409a11df6fb8302ad5
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 b3a13faa53687abc8125b9f3b3c76684637e79748ff56c93b03de8461f790244
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 ec206c3dfe2eb2fd48abc2da41580c2799eb677445cb0982071323e4876876fd
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 451ee4416d30f2bced53046bcdbd3bf965e4b8a704db7253e7e02e4ce4b64339
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 70c5fb50bfbca8d05a93d5bc49523e39f97de7491ad0a047b5bde68bf89a6a34
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 67b4b62265f379415838c479ca2855d9045e159ed0ef707db5d1b02353b13282
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 1e2c2f76732579e2fe70bcd4c2db3e8d48f1fca5566e483a03791004b907c4ba
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.0.662377789~RFe5a1a01.TMP
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.0.662377789~RFe5a1a01.TMP
                                                                                                                                                                                                                                                                                      • Size 414B
                                                                                                                                                                                                                                                                                      • SHA256 2430677a14f825d69632ba83bdeda9345dcf7fbf4d0e44ee92c63a2778a183fe
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 472B
                                                                                                                                                                                                                                                                                      • SHA256 e5a5478ab3024b6d12f6b7806e35be8b3f4289043c4f4ce4144aa6e0d0010d89
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 657B
                                                                                                                                                                                                                                                                                      • SHA256 7117ed41358b685affc6f0265d3f6c9a4c2ccc0c231cc78c3f781d62fdcf2234
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 cb5cb7c76b2f28baa82f6a5934f277577abf6128966ba3d4aca0227ac4484c5c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 e7c1aebb5d4f1ec16b25158b923b5f7d0f6525656b7b67da18b8e057d3710f8d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 616ac60e8139091b8c36ab5941a765a0907f0b5265240825c543ee352c33875f
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 410328782aac7a69c111e7defd29b49596630bffc676463d807adfa4af2f05cc
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 3afab855e0e0af387064924247943fcd557c319bbe2b06a3a36fce8ed5a86a11
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 c04d7119fd220420f53423b9f447067910fe96356da45d41cefda4302e0efcd4
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 565B
                                                                                                                                                                                                                                                                                      • SHA256 f8d56fc1e0e69034a47b49c175c0cd6603f845bc45fee363a7092deae5bcb564
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 750B
                                                                                                                                                                                                                                                                                      • SHA256 9311656d52f98b109a239d37023fd0c60d1f59e49e18f202e158b8df93268f51
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 523bcb38663fc3d07047bd21d23097e34b7c548f991c5e03608d3402c325ee66
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 ad14abe5534dadd6779f4f52e42828ed68de39c7dfdf845de0f9f3ab64c42115
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 224B
                                                                                                                                                                                                                                                                                      • SHA256 57c0d9d10692d75e7dfed769274ca4b02bb0543dc669a2cd702399ec03be46eb
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 200B
                                                                                                                                                                                                                                                                                      • SHA256 93bfce7018522bb4cbb2ef08bd885f33086e59672700d457d7ebd15477275f9d
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 b1a7656714b8969a23fc71d8faf6303b6a2ecc7b4db80bfa20dd2b87d6e3ccfa
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 f6ff5ec75474b0325828d44e7e6abeb96951e7270c45967ef6a2ddbfc9051f07
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 932B
                                                                                                                                                                                                                                                                                      • SHA256 e3cae1c1177123305abd0c69f62104cb68210119e0d53b0656333bf8c0ffb67b
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 c7df6aabb6212a088f004e578994bf900e6b64360bd9ad634e5fd677af9baafb
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 caadafa36c696cc5a4f7ba1ffa8f81d4ad1aedfd8933b2ddf7227e2cee4474b7
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 49bdfcf2327440bc6c619c88efe43bde9d92ba480b56759358dab0d662f7d93c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 224B
                                                                                                                                                                                                                                                                                      • SHA256 26d7099256471f4d778b7f61ad8a7ab27866ec1fd673555f899b938c69c637c6
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 ea98a62ccad0dbae9d388223eb89c1686af25629990244e5c0230eaaff5d97c9
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 b591fb0be269d904a57056e2d4ffd6ae463bd2e1d3106fbed48b5efe187acd04
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192
                                                                                                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                                                                                                      • SHA256 45cb5d088798af4e1c79af4a0ee20299b74e864a0c42abb67a43f35e7118123c
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      ssdfp1632.1.1574030192~RFe5a225e.TMP
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1632.1.1574030192~RFe5a225e.TMP
                                                                                                                                                                                                                                                                                      • Size 171B
                                                                                                                                                                                                                                                                                      • SHA256 e5178950203fbd85334967a779407837070ce4a3c205a2bf90d8b1b1527f76d5
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      data_0
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                                                                                                                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                                                                                                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      data_1
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_1
                                                                                                                                                                                                                                                                                      • Size 264KB
                                                                                                                                                                                                                                                                                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 90bc2271ea9a3ff8eff32eeee84d3e02bd198b124e6b20e97d1eec5953018717
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 2648397aca4949723c20050674febe37acb781c1b5ce4cbe7aa6270559f0466a
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 74b3ba3f387dde1effaaeb9df287f26d9f06cec0646c6f268e690e2ea5bbc564
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      Local State
                                                                                                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                                                                                                      • Size 4KB
                                                                                                                                                                                                                                                                                      • SHA256 960351dbaaf693f0cb398c58e73186b64c37fa4e907c4a3e8407a19657a7c9a4
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      REGB008.tmp
                                                                                                                                                                                                                                                                                      • Path C:\Windows\SystemTemp\REGB008.tmp
                                                                                                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                                                                                                      • SHA256 c5132dea4a772d8385531f705d5f845d06fc20f475603f7a60b51ef716483909
                                                                                                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                                                                                                      memory/8-4190-0x00000000760A0000-0x00000000766A2000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/8-4189-0x0000000075960000-0x0000000075BB2000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/8-4191-0x0000000073C30000-0x0000000073D05000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/8-4194-0x00000000745D0000-0x0000000074A55000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/8-4195-0x0000000073BE0000-0x0000000073C30000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/8-4193-0x00000000769B0000-0x0000000076A14000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/8-4192-0x0000000074510000-0x0000000074535000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2232-4181-0x0000000075960000-0x0000000075BB2000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2232-4182-0x00000000760A0000-0x00000000766A2000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2232-4183-0x0000000073C30000-0x0000000073D05000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2232-4184-0x0000000074510000-0x0000000074535000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2232-4185-0x00000000769B0000-0x0000000076A14000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2232-4187-0x0000000073BE0000-0x0000000073C30000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2232-4186-0x00000000745D0000-0x0000000074A55000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2436-460-0x00007FF9E2C40000-0x00007FF9E2C41000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2436-461-0x00007FF9E39A0000-0x00007FF9E39A1000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2560-4149-0x0000000075960000-0x0000000075BB2000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2560-4151-0x00000000745D0000-0x0000000074A55000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2560-4154-0x0000000073C30000-0x0000000073D05000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2560-4155-0x0000000073BE0000-0x0000000073C30000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2560-4150-0x00000000760A0000-0x00000000766A2000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2560-4153-0x00000000769B0000-0x0000000076A14000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2560-4152-0x0000000074510000-0x0000000074535000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2728-4175-0x0000000073C30000-0x0000000073D05000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2728-4173-0x0000000075960000-0x0000000075BB2000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2728-4174-0x00000000760A0000-0x00000000766A2000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2728-4176-0x0000000074510000-0x0000000074535000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2728-4177-0x00000000769B0000-0x0000000076A14000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2728-4178-0x00000000745D0000-0x0000000074A55000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/2728-4179-0x0000000073BE0000-0x0000000073C30000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/3820-3221-0x0000026E0B5C0000-0x0000026E0BD4C000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/3820-538-0x0000026E0B5C0000-0x0000026E0BD4C000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4552-4169-0x00007FF9DA7C0000-0x00007FF9DA8CC000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4552-4167-0x00007FF9E33F0000-0x00007FF9E345F000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4552-4168-0x00007FF9CE9D0000-0x00007FF9CEECA000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4552-4170-0x00007FF9E01F0000-0x00007FF9E0232000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4552-4171-0x00007FF9E0400000-0x00007FF9E0467000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4552-4166-0x00007FF9E1A40000-0x00007FF9E21EE000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4552-4164-0x00007FF9E2950000-0x00007FF9E2A0D000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4552-4165-0x00007FF9E1500000-0x00007FF9E1874000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4944-4160-0x00007FF9CE9D0000-0x00007FF9CEECA000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4944-4157-0x00007FF9E1500000-0x00007FF9E1874000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4944-4156-0x00007FF9E2950000-0x00007FF9E2A0D000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4944-4158-0x00007FF9E1A40000-0x00007FF9E21EE000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4944-4159-0x00007FF9E33F0000-0x00007FF9E345F000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4944-4161-0x00007FF9DA7C0000-0x00007FF9DA8CC000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4944-4162-0x00007FF9E01F0000-0x00007FF9E0232000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/4944-4163-0x00007FF9E0400000-0x00007FF9E0467000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6749-0x0000000007870000-0x000000000787A000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6711-0x00000000078B0000-0x00000000078E4000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6750-0x0000000007CC0000-0x0000000007CE6000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6581-0x0000000003340000-0x0000000003376000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6596-0x0000000005B60000-0x0000000005BC6000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6595-0x0000000005AF0000-0x0000000005B56000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6594-0x0000000005A50000-0x0000000005A72000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6597-0x0000000006240000-0x0000000006597000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6748-0x0000000007C30000-0x0000000007C4C000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6584-0x0000000005C10000-0x000000000623A000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6620-0x00000000066F0000-0x000000000670E000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6621-0x0000000006780000-0x00000000067CC000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6712-0x000000006A2A0000-0x000000006A2EC000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6747-0x0000000007A50000-0x0000000007A6A000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6731-0x0000000007870000-0x000000000788E000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6746-0x00000000080A0000-0x000000000871A000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/5260-6737-0x00000000078F0000-0x0000000007994000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6244-4008-0x00007FF9DA7C0000-0x00007FF9DA8CC000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6244-4010-0x00007FF9E1A40000-0x00007FF9E21EE000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6244-4003-0x00007FF9E1500000-0x00007FF9E1874000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6244-4009-0x00007FF9E01F0000-0x00007FF9E0232000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6244-4005-0x00007FF9E33F0000-0x00007FF9E345F000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6244-4002-0x00007FF9E2950000-0x00007FF9E2A0D000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6244-4007-0x00007FF9E0400000-0x00007FF9E0467000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6244-4006-0x00007FF9CE9D0000-0x00007FF9CEECA000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6920-4143-0x00007FF9E33F0000-0x00007FF9E345F000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6920-4146-0x00007FF9DA7C0000-0x00007FF9DA8CC000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6920-4147-0x00007FF9E01F0000-0x00007FF9E0232000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6920-4144-0x00007FF9CE9D0000-0x00007FF9CEECA000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6920-4142-0x00007FF9E1A40000-0x00007FF9E21EE000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6920-4145-0x00007FF9E0400000-0x00007FF9E0467000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6920-4141-0x00007FF9E1500000-0x00007FF9E1874000-memory.dmp
                                                                                                                                                                                                                                                                                      Download

                                                                                                                                                                                                                                                                                      memory/6920-4140-0x00007FF9E2950000-0x00007FF9E2A0D000-memory.dmp
                                                                                                                                                                                                                                                                                      Download