Overview

overview

8

Static

static

1

madium-exploit.html

windows11-21h2-x64

8

Resubmissions

28/05/2026, 10:13

260528-l84gkaet2w8

28/05/2026, 10:03

260528-l3mxmacw2q8

Analysis

  • user interaction
    yes
  • max time kernel
    252s
  • max time network
    255s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    28/05/2026, 10:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    madium-exploit.html
  • Size 1.0MB
  • Sample260528-l3mxmacw2q
  • SHA256 1f0a293b460631ca5a17bc7b8dbb0efb29a94b740012fd8474aa8e26cb6ea5f2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationransomwarespywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Password Policy Discovery 1 TTPs

    Attempt to access detailed information about the password policy used within an enterprise network.

    discovery
  • Drops file in System32 directory 10 IoCs
  • Enumerates processes with tasklist 1 TTPs 2 IoCs
    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 5 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

    defense_evasion
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies trusted root certificate store through registry 1 TTPs 7 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

    defense_evasion
  • System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 62 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Kills process with taskkill 1 IoCs
    defense_evasion
  • Modifies Internet Explorer settings 1 TTPs 5 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 58 IoCs
  • Modifies registry key 1 TTPs 5 IoCs
  • Modifies system certificate store 2 TTPs 9 IoCs
    defense_evasionspywaretrojan
  • NTFS ADS 2 IoCs
  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 31 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 41 IoCs
  • Suspicious use of SetWindowsHookEx 11 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k netsvcs -p -s Schedule
    1⤵
      PID:1232
      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
        2⤵
        • Enumerates system info in registry
        PID:8852
        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.104 --initial-client-data=0x280,0x284,0x288,0x218,0x28c,0x7ff73fde8eb8,0x7ff73fde8ec4,0x7ff73fde8ed0
          3⤵
            PID:7640
          • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
            3⤵
              PID:9120
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\madium-exploit.html
          1⤵
          • Drops file in Windows directory
          • Modifies data under HKEY_USERS
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:2600
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8b2fcc728,0x7ff8b2fcc734,0x7ff8b2fcc740
            2⤵
              PID:4308
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1648,i,8600766811047004907,4261080046279741230,262144 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=1976 /prefetch:2
              2⤵
                PID:2452
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2228,i,1170788470747402567,14863608929292351137,524288 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2244 /prefetch:11
                2⤵
                • Downloads MZ/PE file
                • System Time Discovery
                PID:3172
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2364,i,11885259561429964399,4626465391218190409,524288 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2752 /prefetch:13
                2⤵
                  PID:2596
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,9037359079132909357,11911287768021307456,2097152 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3236 /prefetch:1
                  2⤵
                    PID:4948
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3228,i,10158157305249445466,8404247425529728786,2097152 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3268 /prefetch:1
                    2⤵
                      PID:1652
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4464,i,1876673346014591886,436334883965232151,2097152 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4480 /prefetch:9
                      2⤵
                        PID:2484
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5128,i,3602349481654102655,2291195425132098484,2097152 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5132 /prefetch:1
                        2⤵
                          PID:4732
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5252,i,1063059288090875276,11664614159561626884,2097152 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5324 /prefetch:1
                          2⤵
                            PID:3532
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5460,i,11364720813957588830,4446993468214084046,524288 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5436 /prefetch:14
                            2⤵
                            • Modifies registry class
                            PID:1876
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5488,i,13825806124069916505,13363336592044268720,524288 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5472 /prefetch:12
                            2⤵
                              PID:4152
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5704,i,15025130915544324703,14001790246590654070,2097152 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5700 /prefetch:1
                              2⤵
                                PID:4716
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5868,i,1017519876190349559,994090370247140265,2097152 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5836 /prefetch:1
                                2⤵
                                  PID:1768
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5348,i,5028197023992850854,10050931691149056829,2097152 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5684 /prefetch:1
                                  2⤵
                                    PID:3232
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5364,i,3926613612616224069,1680913632026197741,2097152 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5384 /prefetch:1
                                    2⤵
                                      PID:2392
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5836,i,12016553142120399150,1240925166445151040,2097152 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5856 /prefetch:1
                                      2⤵
                                        PID:4764
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6404,i,10828629335688365704,10102404423504364168,2097152 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6400 /prefetch:1
                                        2⤵
                                          PID:4556
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7444,i,14382113473361610175,16129470967690866677,524288 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7452 /prefetch:14
                                          2⤵
                                            PID:2004
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5848,i,12107897777422698766,15534865088740253804,524288 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5836 /prefetch:14
                                            2⤵
                                              PID:888
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7452,i,1889314905820047170,18248883644694435620,524288 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=212 /prefetch:14
                                              2⤵
                                                PID:4024
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5880,i,340732255186103651,4284546979107184789,524288 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6784 /prefetch:14
                                                2⤵
                                                  PID:2860
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6116,i,6603796014806490254,1621898624816941618,2097152 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5372 /prefetch:1
                                                  2⤵
                                                    PID:5080
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5988,i,12475893492025660399,12788875330733842144,2097152 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6336 /prefetch:1
                                                    2⤵
                                                      PID:3000
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3856,i,9699811990987337668,5704822550093320559,524288 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4568 /prefetch:14
                                                      2⤵
                                                      • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                      • NTFS ADS
                                                      PID:4568
                                                    • C:\Users\Admin\Downloads\Madium Executor_96266741.exe
                                                      "C:\Users\Admin\Downloads\Madium Executor_96266741.exe"
                                                      2⤵
                                                      • Downloads MZ/PE file
                                                      • Executes dropped EXE
                                                      • System Location Discovery: System Language Discovery
                                                      • Modifies registry class
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:3736
                                                      • C:\Users\Admin\AppData\Local\OperaGX_96266741.exe
                                                        C:\Users\Admin\AppData\Local\OperaGX_96266741.exe --silent --allusers=0
                                                        3⤵
                                                        • Executes dropped EXE
                                                        • System Location Discovery: System Language Discovery
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:4488
                                                        • C:\Users\Admin\AppData\Local\Temp\7zS881E2369\installer.exe
                                                          C:\Users\Admin\AppData\Local\Temp\7zS881E2369\installer.exe --silent --allusers=0 --server-tracking-blob=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
                                                          4⤵
                                                          • Executes dropped EXE
                                                          • Enumerates connected drives
                                                          • Enumerates system info in registry
                                                          • Modifies system certificate store
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:3844
                                                          • C:\Users\Admin\AppData\Local\Temp\7zS881E2369\installer.exe
                                                            C:\Users\Admin\AppData\Local\Temp\7zS881E2369\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.111 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff760fa9ed8,0x7ff760fa9ee4,0x7ff760fa9ef0
                                                            5⤵
                                                            • Executes dropped EXE
                                                            PID:1172
                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\installer.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\installer.exe" --version
                                                            5⤵
                                                            • Executes dropped EXE
                                                            PID:1604
                                                          • C:\Users\Admin\AppData\Local\Temp\7zS881E2369\installer.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\7zS881E2369\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=3844 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_20260528110501" --session-guid=57ba8e14-5c55-48e0-9c4f-e979f1a7a08f --server-tracking-blob="ZWYyMzI3NThhMTdiZTFhZWYzNGEzNTUwMGJlNDY5ODYzN2U3YzdkZGNjOGJmMWYzZWFhNmM0OWNjNjFkZGY2OTp7ImNvdW50cnkiOiJHQiIsImVkaXRpb24iOiJzdGQtMiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhX2d4In0sInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yP3V0bV9zb3VyY2U9UFdOZ2FtZXMmdXRtX21lZGl1bT1wYSZ1dG1fY2FtcGFpZ249UFdOX0dCX1BCNV85NDE2XzM1NzUmdXRtX2lkPTY0MzBmZDQzMjRlNDQwM2ZhZmExNjAxMjE1ZjExMWI0Iiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTEiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzc5OTYyNjk5LjA5NjEiLCJ1c2VyYWdlbnQiOiJNb3ppbGxhLzQuMCAoY29tcGF0aWJsZTsgTVNJRSA3LjA7IFdpbmRvd3MgTlQgNi4yOyBXT1c2NDsgVHJpZGVudC83LjA7IC5ORVQ0LjBDOyAuTkVUNC4wRTsgLk5FVCBDTFIgMi4wLjUwNzI3OyAuTkVUIENMUiAzLjAuMzA3Mjk7IC5ORVQgQ0xSIDMuNS4zMDcyOSkiLCJ1dG0iOnsiY2FtcGFpZ24iOiJQV05fR0JfUEI1Xzk0MTZfMzU3NSIsImlkIjoiNjQzMGZkNDMyNGU0NDAzZmFmYTE2MDEyMTVmMTExYjQiLCJtZWRpdW0iOiJwYSIsInNvdXJjZSI6IlBXTmdhbWVzIn0sInV1aWQiOiJhYmY2OWU3NC05ODJhLTQxOTktODQyOC1iNjk0YmRlZTk1YjMifQ== " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=A807000000000000
                                                            5⤵
                                                            • Executes dropped EXE
                                                            • Enumerates connected drives
                                                            • Enumerates system info in registry
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:3832
                                                            • C:\Users\Admin\AppData\Local\Temp\7zS881E2369\installer.exe
                                                              C:\Users\Admin\AppData\Local\Temp\7zS881E2369\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.111 --initial-client-data=0x280,0x284,0x294,0x25c,0x298,0x7ff760fa9ed8,0x7ff760fa9ee4,0x7ff760fa9ef0
                                                              6⤵
                                                              • Executes dropped EXE
                                                              PID:4380
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\installer.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\installer.exe" --backend --initial-pid=3844 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011" --session-guid=57ba8e14-5c55-48e0-9c4f-e979f1a7a08f --server-tracking-blob="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 " --silent --desktopshortcut=1 --install-subfolder=131.0.5877.104
                                                              6⤵
                                                              • Executes dropped EXE
                                                              • Enumerates connected drives
                                                              • Modifies registry class
                                                              • Suspicious use of FindShellTrayWindow
                                                              PID:5760
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\installer.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.104 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff6da1a9e98,0x7ff6da1a9ea4,0x7ff6da1a9eb0
                                                                7⤵
                                                                • Executes dropped EXE
                                                                PID:1748
                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\assistant\assistant_installer.exe
                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Adds Run key to start application
                                                                • System Location Discovery: System Language Discovery
                                                                • Modifies Internet Explorer settings
                                                                PID:3432
                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\assistant\assistant_installer.exe
                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x234,0x238,0x23c,0x1f0,0x240,0x861b80,0x861b8c,0x861b98
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:2736
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • Enumerates system info in registry
                                                                  PID:5440
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x711b80,0x711b8c,0x711b98
                                                                    9⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • System Location Discovery: System Language Discovery
                                                                    PID:5280
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                                                                    9⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • Suspicious use of FindShellTrayWindow
                                                                    • Suspicious use of SendNotifyMessage
                                                                    PID:6132
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                      10⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • Enumerates system info in registry
                                                                      PID:6068
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_crashreporter.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.104 --initial-client-data=0x148,0x14c,0x150,0xd4,0x154,0x7ff88e3af650,0x7ff88e3af660,0x7ff88e3af670
                                                                        11⤵
                                                                        • Executes dropped EXE
                                                                        PID:5804
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                      10⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:5932
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_crashreporter.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.104 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ff88e3af650,0x7ff88e3af660,0x7ff88e3af670
                                                                        11⤵
                                                                        • Executes dropped EXE
                                                                        PID:6020
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0x8b4370,0x8b437c,0x8b4388
                                                                      10⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:3136
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                        11⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        • Enumerates system info in registry
                                                                        PID:5428
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_crashreporter.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.104 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ff88e3af650,0x7ff88e3af660,0x7ff88e3af670
                                                                          12⤵
                                                                          • Executes dropped EXE
                                                                          PID:5808
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                        11⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        • Enumerates system info in registry
                                                                        PID:5488
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_crashreporter.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.104 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ff88e3af650,0x7ff88e3af660,0x7ff88e3af670
                                                                          12⤵
                                                                          • Executes dropped EXE
                                                                          PID:6080
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                        11⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        • Enumerates system info in registry
                                                                        PID:2232
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_crashreporter.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.104 --initial-client-data=0x148,0x14c,0x150,0xb0,0x154,0x7ff88e3af650,0x7ff88e3af660,0x7ff88e3af670
                                                                          12⤵
                                                                          • Executes dropped EXE
                                                                          PID:5856
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Adds Run key to start application
                                                                • Drops file in Windows directory
                                                                • Checks processor information in registry
                                                                • Suspicious behavior: EnumeratesProcesses
                                                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                • Suspicious use of FindShellTrayWindow
                                                                • Suspicious use of SendNotifyMessage
                                                                PID:5796
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_crashreporter.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.104 --initial-client-data=0x148,0x14c,0x150,0x128,0x154,0x7ff88e3af650,0x7ff88e3af660,0x7ff88e3af670
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  PID:5764
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,18213658113601439600,5517974867350180056,262144 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1772 /prefetch:2
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:5708
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=1924,i,14272503976160962694,10647466772805730607,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1928 /prefetch:11
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • System Time Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6164
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2280,i,10216132204635674531,1851354140512133437,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2288 /prefetch:13
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6316
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3084,i,10393606358904142732,7576323952895484956,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3068 /prefetch:14
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6564
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3196,i,555181584816892157,8834156835140658739,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3268 /prefetch:14
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6572
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3148,i,6110840784644089152,2198801984939337087,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3208 /prefetch:14
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6580
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3172,i,11207501925524595613,2155610824907819308,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3236 /prefetch:14
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6588
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3228,i,17290419342098092552,876351196017061750,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3296 /prefetch:14
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6596
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3260,i,17100212886027899838,8324108055526339205,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3316 /prefetch:14
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6604
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3512,i,17651940813691008845,11164645870651382467,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3520 /prefetch:1
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6672
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_gx_splash.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  PID:6916
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4532,i,3382291658341967891,1155903395700209936,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4552 /prefetch:1
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  PID:6664
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4756,i,12051483336786193305,9268906030252240659,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4776 /prefetch:9
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6760
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4920,i,6938649693299378983,14470974029020240106,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4996 /prefetch:1
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6652
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5156,i,1037312989027343744,5923599376529053025,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5164 /prefetch:1
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6492
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5284,i,9181521329559265168,6460065930018305691,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5304 /prefetch:14
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6712
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5280,i,14323885454850490313,755791632540476436,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5308 /prefetch:14
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6728
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5292,i,1120564461189855426,11593297160883147555,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5316 /prefetch:14
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6744
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5296,i,4042461555157958618,6693920202940920055,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5384 /prefetch:14
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  PID:6836
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6404,i,15221227543216268860,1518137669112710055,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6420 /prefetch:9
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:7044
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6536,i,1753807248661714421,3737742156418640084,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6676 /prefetch:9
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  PID:7156
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=4528,i,9767350619619347051,1088112555387429850,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6936 /prefetch:9
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  PID:6960
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=6704,i,9335838895543847571,9232586182159682668,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6596 /prefetch:12
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:8160
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=7192,i,13137807706273608247,11635014878953814383,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=7124 /prefetch:1
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  PID:6500
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7384,i,13945131231434207007,4867549346663441540,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7496 /prefetch:14
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:8000
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7476,i,17122796872163648873,16427227658126529448,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7556 /prefetch:14
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6328
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7484,i,8594833966782105245,8224081484645536940,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7576 /prefetch:14
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:8176
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7464,i,10219515261843290305,12063300961907985161,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7536 /prefetch:14
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  PID:7144
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7400,i,9297388441124943810,4208341015864498745,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7516 /prefetch:14
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:6568
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8196,i,7866745927629404351,11689094068236966034,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8208 /prefetch:14
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  PID:7516
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8352,i,10810286327101797394,17218791408346840958,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8420 /prefetch:14
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  PID:7540
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8344,i,6514066894948616214,13340794379119590739,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8396 /prefetch:14
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:7536
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8372,i,3868029344364602431,13629947408556628834,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8428 /prefetch:14
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  PID:7560
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8384,i,2320172375617588959,4100636576712256777,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8456 /prefetch:14
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:7576
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8424,i,6563485049978122653,2736592897130698667,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8988 /prefetch:14
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:7616
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8812,i,14739784426098044379,14779013799267378385,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8856 /prefetch:14
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  PID:8324
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5624,i,11302095066439590208,1126929222351377416,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9244 /prefetch:14
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:8336
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9408,i,9877425267436672354,10355491395116324989,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9384 /prefetch:9
                                                                  8⤵
                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                  • Enumerates system info in registry
                                                                  PID:8380
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                                                                  8⤵
                                                                  • Enumerates system info in registry
                                                                  PID:6796
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.104 --initial-client-data=0x284,0x288,0x28c,0x20c,0x290,0x7ff73fde8eb8,0x7ff73fde8ec4,0x7ff73fde8ed0
                                                                    9⤵
                                                                      PID:9092
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10064,i,2818133521782687720,1344016018490929727,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=4176 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    PID:8400
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10160,i,7252687191372805325,17906225544747667930,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10168 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    • Enumerates system info in registry
                                                                    PID:8868
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=10392,i,10055543883233612708,16819977353309967233,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10420 /prefetch:1
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    • Enumerates system info in registry
                                                                    PID:8708
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3548,i,3036737407761086719,6988370685332636788,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=3556 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    PID:8416
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2716,i,9330706885910484475,7691819623745253633,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=3620 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    PID:8312
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3264,i,2855426375944264386,6708087760988145066,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=3644 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    • Enumerates system info in registry
                                                                    PID:8332
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10304,i,15013997514623598075,14842980578089893364,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10144 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    • Enumerates system info in registry
                                                                    PID:2532
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9380,i,10281346966972596693,7802194245953743654,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=7836 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    • Enumerates system info in registry
                                                                    PID:8616
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5884,i,17682313880631854350,17469458754908758858,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=5804 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    PID:7016
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7520,i,11463769758616830411,5871141719861402333,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=5888 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    PID:6880
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3264,i,16854872626321063442,954561371887534707,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=3268 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    PID:7676
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9368,i,12930132824166916777,9405601562791774910,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=9364 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    PID:7328
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=4316,i,3338082560270502091,6385305426405142730,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=4288 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    • Enumerates system info in registry
                                                                    PID:7796
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=10192,i,8963864655456804267,6441797928151402898,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=8700 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    • Enumerates system info in registry
                                                                    PID:8348
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9632,i,18034014680701930862,6981406476410769523,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=9936 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    • Enumerates system info in registry
                                                                    PID:7476
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5324,i,17692826449021067792,3387028753063684224,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=3972 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    PID:8528
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=4184,i,5769261729902232758,7205999078382220148,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=3056 /prefetch:9
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    • Enumerates system info in registry
                                                                    PID:8748
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=7776,i,4838081222360829966,1318584998202966375,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=8620 /prefetch:9
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    PID:4368
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5852,i,9605904151712957275,18187832201006172427,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=10172 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    • Enumerates system info in registry
                                                                    PID:3224
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=5884,i,3147841579869388955,9097849057540306303,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8056 /prefetch:9
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    PID:7452
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=3268,i,17489148243660047125,4625538365080087484,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=4180 /prefetch:9
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    • Enumerates system info in registry
                                                                    PID:7652
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=6692,i,12801867632529321860,6509436234645197106,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=8484 /prefetch:1
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    PID:7412
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=7008,i,13436356233991066035,8828041601062652240,524288 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=10064 /prefetch:14
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    • Enumerates system info in registry
                                                                    • NTFS ADS
                                                                    PID:5784
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=4264,i,4769412354521887345,3174579244250123990,2097152 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=8488 /prefetch:1
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    • Enumerates system info in registry
                                                                    PID:8776
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4244,i,13861656172577389258,17114110321312713612,262144 --field-trial-handle=1788,i,4685842574620592867,3955229421599449034,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1792,i,13044522214222899789,16938218897665861475,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=3552 /prefetch:10
                                                                    8⤵
                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                    • Enumerates system info in registry
                                                                    PID:9112
                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\assistant\Opera_GX_assistant_131.0.5877.36_Setup.exe_sfx.exe
                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\assistant\Opera_GX_assistant_131.0.5877.36_Setup.exe_sfx.exe"
                                                              5⤵
                                                              • Executes dropped EXE
                                                              • System Location Discovery: System Language Discovery
                                                              PID:648
                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\assistant\assistant_installer.exe
                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\assistant\assistant_installer.exe" --version
                                                              5⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • System Location Discovery: System Language Discovery
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:3392
                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\assistant\assistant_installer.exe
                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x861b80,0x861b8c,0x861b98
                                                                6⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • System Location Discovery: System Language Discovery
                                                                PID:1644
                                                        • C:\Program Files (x86)\Booster\GameBooster.exe
                                                          "C:\Program Files (x86)\Booster\GameBooster.exe" install
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • System Location Discovery: System Language Discovery
                                                          PID:5028
                                                        • C:\Users\Admin\AppData\Local\Speedtester_96266741.exe
                                                          C:\Users\Admin\AppData\Local\Speedtester_96266741.exe
                                                          3⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:4764
                                                          • C:\Windows\SysWOW64\cmd.exe
                                                            "C:\Windows\system32\cmd.exe" /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq speedtest.exe" /FO csv | "C:\Windows\system32\find.exe" "speedtest.exe"
                                                            4⤵
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:480
                                                            • C:\Windows\SysWOW64\tasklist.exe
                                                              tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq speedtest.exe" /FO csv
                                                              5⤵
                                                              • Enumerates processes with tasklist
                                                              • Suspicious behavior: EnumeratesProcesses
                                                              PID:1068
                                                            • C:\Windows\SysWOW64\find.exe
                                                              "C:\Windows\system32\find.exe" "speedtest.exe"
                                                              5⤵
                                                              • System Location Discovery: System Language Discovery
                                                              PID:4288
                                                        • C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe" -c:1538 -t:InstallUnion
                                                          3⤵
                                                          • System Location Discovery: System Language Discovery
                                                          PID:7820
                                                          • C:\Program Files (x86)\PremierOpinion\pmropn.exe
                                                            C:\Program Files (x86)\PremierOpinion\pmropn.exe -install -uninst:PremierOpinion -t:InstallUnion -bid:YiIzgMM3A6YbchBNHqPOPN -o:0
                                                            4⤵
                                                            • Drops file in System32 directory
                                                            • Modifies trusted root certificate store through registry
                                                            • Modifies system certificate store
                                                            PID:8100
                                                        • C:\Windows\SysWOW64\NOTEPAD.EXE
                                                          "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                                          3⤵
                                                          • Opens file in notepad (likely ransom note)
                                                          PID:7788
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7624,i,2520476737672227566,16629999648962376775,262144 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7608 /prefetch:10
                                                        2⤵
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        PID:5392
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=7640,i,8740281519092547258,7323669581422434020,524288 --field-trial-handle=1980,i,961528937794539192,18418640511269361134,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7648 /prefetch:14
                                                        2⤵
                                                          PID:8604
                                                      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                        1⤵
                                                          PID:2388
                                                        • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
                                                          "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
                                                          1⤵
                                                          • Modifies registry class
                                                          • Suspicious use of SetWindowsHookEx
                                                          PID:1476
                                                        • C:\Windows\system32\svchost.exe
                                                          C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                          1⤵
                                                            PID:1300
                                                          • C:\Program Files (x86)\Booster\GameBooster.exe
                                                            "C:\Program Files (x86)\Booster\GameBooster.exe"
                                                            1⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • System Location Discovery: System Language Discovery
                                                            • Modifies data under HKEY_USERS
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:1784
                                                            • C:\Program Files (x86)\Booster\GameBooster.exe
                                                              "C:\Program Files (x86)\Booster\GameBooster.exe" --minimized
                                                              2⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • System Location Discovery: System Language Discovery
                                                              • Suspicious use of FindShellTrayWindow
                                                              • Suspicious use of SendNotifyMessage
                                                              PID:4608
                                                          • C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe"
                                                            1⤵
                                                            • Executes dropped EXE
                                                            • Drops file in Windows directory
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:5472
                                                            • C:\Windows\system32\reg.exe
                                                              C:\Windows\system32\reg.exe QUERY HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v speedtest
                                                              2⤵
                                                              • Modifies registry key
                                                              PID:5648
                                                            • C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\speedtest" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1728,i,15742543686129315683,174726563300344355,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1720 /prefetch:2
                                                              2⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              PID:5744
                                                            • C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\speedtest" --field-trial-handle=1728,i,15742543686129315683,174726563300344355,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2044 /prefetch:11
                                                              2⤵
                                                              • Executes dropped EXE
                                                              PID:5896
                                                            • C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\speedtest" --app-path="C:\Users\Admin\AppData\Local\Programs\speedtest\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1779962120917475 --launch-time-ticks=629369440 --field-trial-handle=1728,i,15742543686129315683,174726563300344355,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:1
                                                              2⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              PID:5976
                                                            • C:\Windows\system32\reg.exe
                                                              C:\Windows\system32\reg.exe QUERY HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v speedtest
                                                              2⤵
                                                              • Modifies registry key
                                                              PID:6064
                                                            • C:\Windows\system32\reg.exe
                                                              C:\Windows\system32\reg.exe ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v speedtest /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe\" --hidden" /f
                                                              2⤵
                                                              • Adds Run key to start application
                                                              • Modifies registry key
                                                              PID:6080
                                                            • C:\Windows\system32\cmd.exe
                                                              C:\Windows\system32\cmd.exe /d /s /c "tasklist /fo csv /nh"
                                                              2⤵
                                                                PID:7212
                                                                • C:\Windows\system32\tasklist.exe
                                                                  tasklist /fo csv /nh
                                                                  3⤵
                                                                  • Enumerates processes with tasklist
                                                                  PID:6468
                                                              • C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\speedtest" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1728,i,15742543686129315683,174726563300344355,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1628 /prefetch:10
                                                                2⤵
                                                                  PID:3732
                                                              • C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe" --hidden
                                                                1⤵
                                                                • Executes dropped EXE
                                                                • Suspicious use of WriteProcessMemory
                                                                PID:5072
                                                                • C:\Windows\system32\reg.exe
                                                                  C:\Windows\system32\reg.exe QUERY HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v speedtest
                                                                  2⤵
                                                                  • Modifies registry key
                                                                  PID:5868
                                                                  • C:\Windows\System32\Conhost.exe
                                                                    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                    3⤵
                                                                      PID:5648
                                                                  • C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\speedtest" --field-trial-handle=2056,i,17523825214069020052,17735801994051382626,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2092 /prefetch:11
                                                                    2⤵
                                                                    • Executes dropped EXE
                                                                    PID:6048
                                                                  • C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\speedtest" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2056,i,17523825214069020052,17735801994051382626,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:2
                                                                    2⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    PID:5996
                                                                  • C:\Windows\system32\reg.exe
                                                                    C:\Windows\system32\reg.exe QUERY HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v speedtest
                                                                    2⤵
                                                                    • Modifies registry key
                                                                    PID:6008
                                                                  • C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\speedtest\speedtest.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\speedtest" --app-path="C:\Users\Admin\AppData\Local\Programs\speedtest\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1779962120917513 --launch-time-ticks=631246233 --field-trial-handle=2056,i,17523825214069020052,17735801994051382626,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:1
                                                                    2⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    PID:6044
                                                                • C:\Windows\system32\wbem\unsecapp.exe
                                                                  C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                  1⤵
                                                                    PID:5412
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                                    1⤵
                                                                    • Executes dropped EXE
                                                                    • Enumerates system info in registry
                                                                    PID:6220
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_crashreporter.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.104 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ff88e3af650,0x7ff88e3af660,0x7ff88e3af670
                                                                      2⤵
                                                                      • Executes dropped EXE
                                                                      PID:6540
                                                                  • C:\Program Files (x86)\PremierOpinion\pmservice.exe
                                                                    "C:\Program Files (x86)\PremierOpinion\pmservice.exe" /service
                                                                    1⤵
                                                                    • Modifies trusted root certificate store through registry
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Modifies data under HKEY_USERS
                                                                    • Modifies system certificate store
                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                    PID:7032
                                                                    • C:\Windows\system32\rundll32.exe
                                                                      C:\Windows\system32\rundll32.exe C:\Windows\system32\pmls64.dll,UpdateProcess 1232
                                                                      2⤵
                                                                        PID:6996
                                                                      • C:\Windows\SysWOW64\reg.exe
                                                                        reg.exe EXPORT "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{eeb86aef-4a5d-4b75-9d74-f16d438fc286}" C:\PROGRA~2\PREMIE~1\RData.reg /y
                                                                        2⤵
                                                                        • Drops file in Windows directory
                                                                        PID:8628
                                                                      • \??\c:\program files (x86)\premieropinion\pmropn.exe
                                                                        "c:\program files (x86)\premieropinion\pmropn.exe" -boot
                                                                        2⤵
                                                                        • Drops file in Program Files directory
                                                                        • System Location Discovery: System Language Discovery
                                                                        • Modifies Internet Explorer settings
                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                        • Suspicious use of SendNotifyMessage
                                                                        • Suspicious use of SetWindowsHookEx
                                                                        PID:8436
                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                          CheckNetIsolation.exe LoopbackExempt -s
                                                                          3⤵
                                                                          • System Location Discovery: System Language Discovery
                                                                          PID:8452
                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                          CheckNetIsolation.exe LoopbackExempt -s
                                                                          3⤵
                                                                            PID:8752
                                                                          • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                                                                            powershell Get-AppxPackage
                                                                            3⤵
                                                                            • Drops file in System32 directory
                                                                            • System Location Discovery: System Language Discovery
                                                                            PID:8996
                                                                        • C:\Windows\SysWOW64\cmd.exe
                                                                          /C C:\PROGRA~2\PREMIE~1\pmropn32.exe 8436
                                                                          2⤵
                                                                            PID:7172
                                                                            • C:\PROGRA~2\PREMIE~1\pmropn32.exe
                                                                              C:\PROGRA~2\PREMIE~1\pmropn32.exe 8436
                                                                              3⤵
                                                                              • Suspicious use of SetWindowsHookEx
                                                                              PID:7304
                                                                          • C:\Windows\SysWOW64\cmd.exe
                                                                            /C C:\PROGRA~2\PREMIE~1\pmropn64.exe 8436
                                                                            2⤵
                                                                            • System Location Discovery: System Language Discovery
                                                                            PID:7324
                                                                            • C:\PROGRA~2\PREMIE~1\pmropn64.exe
                                                                              C:\PROGRA~2\PREMIE~1\pmropn64.exe 8436
                                                                              3⤵
                                                                              • Suspicious use of SetWindowsHookEx
                                                                              PID:8880
                                                                          • \??\c:\program files (x86)\premieropinion\pmropn.exe
                                                                            "c:\program files (x86)\premieropinion\pmropn.exe" -updateapps
                                                                            2⤵
                                                                            • System Location Discovery: System Language Discovery
                                                                            PID:7500
                                                                            • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                              CheckNetIsolation.exe LoopbackExempt -a -n=1527c705-839a-4832-9118-54d4bd6a0c89_cw5n1h2txyewy
                                                                              3⤵
                                                                                PID:7228
                                                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                CheckNetIsolation.exe LoopbackExempt -a -n=c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy
                                                                                3⤵
                                                                                • System Location Discovery: System Language Discovery
                                                                                PID:7812
                                                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                CheckNetIsolation.exe LoopbackExempt -a -n=e2a4f912-2574-4a75-9bb0-0d023378592b_cw5n1h2txyewy
                                                                                3⤵
                                                                                • System Location Discovery: System Language Discovery
                                                                                PID:8556
                                                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                CheckNetIsolation.exe LoopbackExempt -a -n=f46d4000-fd22-4db4-ac8e-4e1ddde828fe_cw5n1h2txyewy
                                                                                3⤵
                                                                                  PID:7636
                                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.aad.brokerplugin_cw5n1h2txyewy
                                                                                  3⤵
                                                                                  • System Location Discovery: System Language Discovery
                                                                                  PID:8988
                                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.accountscontrol_cw5n1h2txyewy
                                                                                  3⤵
                                                                                  • System Location Discovery: System Language Discovery
                                                                                  PID:7684
                                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.asynctextservice_8wekyb3d8bbwe
                                                                                  3⤵
                                                                                  • System Location Discovery: System Language Discovery
                                                                                  PID:7472
                                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.bingnews_8wekyb3d8bbwe
                                                                                  3⤵
                                                                                    PID:8836
                                                                                  • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.bingweather_8wekyb3d8bbwe
                                                                                    3⤵
                                                                                      PID:8916
                                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.bioenrollment_cw5n1h2txyewy
                                                                                      3⤵
                                                                                      • System Location Discovery: System Language Discovery
                                                                                      PID:7436
                                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.creddialoghost_cw5n1h2txyewy
                                                                                      3⤵
                                                                                        PID:8180
                                                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.desktopappinstaller_8wekyb3d8bbwe
                                                                                        3⤵
                                                                                          PID:8432
                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.ecapp_8wekyb3d8bbwe
                                                                                          3⤵
                                                                                          • System Location Discovery: System Language Discovery
                                                                                          PID:7136
                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.gamingapp_8wekyb3d8bbwe
                                                                                          3⤵
                                                                                          • System Location Discovery: System Language Discovery
                                                                                          PID:8500
                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.gethelp_8wekyb3d8bbwe
                                                                                          3⤵
                                                                                          • System Location Discovery: System Language Discovery
                                                                                          PID:8740
                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.heifimageextension_8wekyb3d8bbwe
                                                                                          3⤵
                                                                                          • System Location Discovery: System Language Discovery
                                                                                          PID:8092
                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.lockapp_cw5n1h2txyewy
                                                                                          3⤵
                                                                                          • System Location Discovery: System Language Discovery
                                                                                          PID:3868
                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.microsoftedge.stable_8wekyb3d8bbwe
                                                                                          3⤵
                                                                                          • System Location Discovery: System Language Discovery
                                                                                          PID:7432
                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.microsoftedge_8wekyb3d8bbwe
                                                                                          3⤵
                                                                                          • System Location Discovery: System Language Discovery
                                                                                          PID:8332
                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.microsoftedgedevtoolsclient_8wekyb3d8bbwe
                                                                                          3⤵
                                                                                          • System Location Discovery: System Language Discovery
                                                                                          PID:5948
                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.microsoftofficehub_8wekyb3d8bbwe
                                                                                          3⤵
                                                                                          • System Location Discovery: System Language Discovery
                                                                                          PID:6612
                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.microsoftsolitairecollection_8wekyb3d8bbwe
                                                                                          3⤵
                                                                                          • System Location Discovery: System Language Discovery
                                                                                          PID:6300
                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.microsoftstickynotes_8wekyb3d8bbwe
                                                                                          3⤵
                                                                                            PID:8004
                                                                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                            CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.net.native.framework.2.2_8wekyb3d8bbwe
                                                                                            3⤵
                                                                                              PID:8448
                                                                                            • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                              CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.net.native.runtime.2.2_8wekyb3d8bbwe
                                                                                              3⤵
                                                                                              • System Time Discovery
                                                                                              PID:6780
                                                                                            • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                              CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.onedrivesync_8wekyb3d8bbwe
                                                                                              3⤵
                                                                                                PID:7844
                                                                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.people_8wekyb3d8bbwe
                                                                                                3⤵
                                                                                                  PID:6936
                                                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.powerautomatedesktop_8wekyb3d8bbwe
                                                                                                  3⤵
                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                  PID:8612
                                                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.storepurchaseapp_8wekyb3d8bbwe
                                                                                                  3⤵
                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                  PID:6524
                                                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.todos_8wekyb3d8bbwe
                                                                                                  3⤵
                                                                                                    PID:9204
                                                                                                  • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.ui.xaml.2.4_8wekyb3d8bbwe
                                                                                                    3⤵
                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                    PID:7616
                                                                                                  • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.ui.xaml.cbs_8wekyb3d8bbwe
                                                                                                    3⤵
                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                    PID:7236
                                                                                                  • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.vclibs.140.00.uwpdesktop_8wekyb3d8bbwe
                                                                                                    3⤵
                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                    PID:9116
                                                                                                  • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.vclibs.140.00_8wekyb3d8bbwe
                                                                                                    3⤵
                                                                                                      PID:9148
                                                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.vp9videoextensions_8wekyb3d8bbwe
                                                                                                      3⤵
                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                      PID:6564
                                                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.webmediaextensions_8wekyb3d8bbwe
                                                                                                      3⤵
                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                      PID:7004
                                                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.webpimageextension_8wekyb3d8bbwe
                                                                                                      3⤵
                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                      PID:7532
                                                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.win32webviewhost_cw5n1h2txyewy
                                                                                                      3⤵
                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                      PID:8620
                                                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.apprep.chxapp_cw5n1h2txyewy
                                                                                                      3⤵
                                                                                                        PID:6440
                                                                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy
                                                                                                        3⤵
                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                        PID:6968
                                                                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.callingshellapp_cw5n1h2txyewy
                                                                                                        3⤵
                                                                                                          PID:1016
                                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.capturepicker_cw5n1h2txyewy
                                                                                                          3⤵
                                                                                                            PID:9004
                                                                                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                            CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.cloudexperiencehost_cw5n1h2txyewy
                                                                                                            3⤵
                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                            PID:8356
                                                                                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                            CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.contentdeliverymanager_cw5n1h2txyewy
                                                                                                            3⤵
                                                                                                              PID:8640
                                                                                                            • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                              CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.narratorquickstart_8wekyb3d8bbwe
                                                                                                              3⤵
                                                                                                                PID:8536
                                                                                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.oobenetworkcaptiveportal_cw5n1h2txyewy
                                                                                                                3⤵
                                                                                                                  PID:1840
                                                                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.oobenetworkconnectionflow_cw5n1h2txyewy
                                                                                                                  3⤵
                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                  PID:8412
                                                                                                                  • C:\Windows\System32\Conhost.exe
                                                                                                                    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                    4⤵
                                                                                                                      PID:9204
                                                                                                                  • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.parentalcontrols_cw5n1h2txyewy
                                                                                                                    3⤵
                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                    PID:3868
                                                                                                                  • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.peopleexperiencehost_cw5n1h2txyewy
                                                                                                                    3⤵
                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                    PID:7432
                                                                                                                    • C:\Windows\System32\Conhost.exe
                                                                                                                      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                      4⤵
                                                                                                                        PID:7136
                                                                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.pinningconfirmationdialog_cw5n1h2txyewy
                                                                                                                      3⤵
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      PID:8952
                                                                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.search_cw5n1h2txyewy
                                                                                                                      3⤵
                                                                                                                        PID:5948
                                                                                                                        • C:\Windows\System32\Conhost.exe
                                                                                                                          \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                          4⤵
                                                                                                                            PID:8100
                                                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.secureassessmentbrowser_cw5n1h2txyewy
                                                                                                                          3⤵
                                                                                                                            PID:8420
                                                                                                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                            CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.shellexperiencehost_cw5n1h2txyewy
                                                                                                                            3⤵
                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                            PID:7948
                                                                                                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                            CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy
                                                                                                                            3⤵
                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                            PID:7704
                                                                                                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                            CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.xgpuejectdialog_cw5n1h2txyewy
                                                                                                                            3⤵
                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                            PID:2712
                                                                                                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                            CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windowsalarms_8wekyb3d8bbwe
                                                                                                                            3⤵
                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                            PID:2912
                                                                                                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                            CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windowscalculator_8wekyb3d8bbwe
                                                                                                                            3⤵
                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                            PID:7992
                                                                                                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                            CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windowsfeedbackhub_8wekyb3d8bbwe
                                                                                                                            3⤵
                                                                                                                              PID:2580
                                                                                                                            • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                              CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windowsmaps_8wekyb3d8bbwe
                                                                                                                              3⤵
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              PID:5648
                                                                                                                            • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                              CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windowssoundrecorder_8wekyb3d8bbwe
                                                                                                                              3⤵
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              PID:7228
                                                                                                                              • C:\Windows\System32\Conhost.exe
                                                                                                                                \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                4⤵
                                                                                                                                  PID:7812
                                                                                                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windowsterminal_8wekyb3d8bbwe
                                                                                                                                3⤵
                                                                                                                                  PID:1284
                                                                                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.xbox.tcui_8wekyb3d8bbwe
                                                                                                                                  3⤵
                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                  PID:7908
                                                                                                                                  • C:\Windows\System32\Conhost.exe
                                                                                                                                    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                    4⤵
                                                                                                                                      PID:8612
                                                                                                                                  • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                                    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.xboxgamecallableui_cw5n1h2txyewy
                                                                                                                                    3⤵
                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                    PID:7748
                                                                                                                                  • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                                    CheckNetIsolation.exe LoopbackExempt -a -n=microsoftwindows.client.cbs_cw5n1h2txyewy
                                                                                                                                    3⤵
                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                    PID:7648
                                                                                                                                    • C:\Windows\System32\Conhost.exe
                                                                                                                                      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                      4⤵
                                                                                                                                        PID:7684
                                                                                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoftwindows.undockeddevkit_cw5n1h2txyewy
                                                                                                                                      3⤵
                                                                                                                                        PID:6176
                                                                                                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                                        CheckNetIsolation.exe LoopbackExempt -a -n=ncsiuwpapp_8wekyb3d8bbwe
                                                                                                                                        3⤵
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        PID:1616
                                                                                                                                        • C:\Windows\System32\Conhost.exe
                                                                                                                                          \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                          4⤵
                                                                                                                                            PID:6440
                                                                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=windows.cbspreview_cw5n1h2txyewy
                                                                                                                                          3⤵
                                                                                                                                            PID:7140
                                                                                                                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                                            CheckNetIsolation.exe LoopbackExempt -a -n=windows.printdialog_cw5n1h2txyewy
                                                                                                                                            3⤵
                                                                                                                                              PID:8508
                                                                                                                                            • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                                              CheckNetIsolation.exe LoopbackExempt -a -n=windows_ie_ac_001
                                                                                                                                              3⤵
                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                              PID:9104
                                                                                                                                          • \??\c:\program files (x86)\premieropinion\pmropn.exe
                                                                                                                                            "c:\program files (x86)\premieropinion\pmropn.exe" -installmenu:PremierOpinion -v:NONE
                                                                                                                                            2⤵
                                                                                                                                            • Drops file in System32 directory
                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                            • Modifies data under HKEY_USERS
                                                                                                                                            PID:1804
                                                                                                                                        • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                                          C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                                          1⤵
                                                                                                                                            PID:7292
                                                                                                                                          • C:\Windows\System32\rundll32.exe
                                                                                                                                            C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                            1⤵
                                                                                                                                              PID:7660
                                                                                                                                            • C:\Users\Admin\Desktop\Madium\Madium-Installer.exe
                                                                                                                                              "C:\Users\Admin\Desktop\Madium\Madium-Installer.exe"
                                                                                                                                              1⤵
                                                                                                                                                PID:5392
                                                                                                                                                • C:\Windows\system32\cmd.exe
                                                                                                                                                  C:\Windows\system32\cmd.exe /c cls
                                                                                                                                                  2⤵
                                                                                                                                                    PID:9064
                                                                                                                                                  • C:\Windows\system32\cmd.exe
                                                                                                                                                    C:\Windows\system32\cmd.exe /c taskkill /F /IM Madium.exe /IM Loader.exe >nul 2>&1
                                                                                                                                                    2⤵
                                                                                                                                                      PID:2388
                                                                                                                                                      • C:\Windows\system32\taskkill.exe
                                                                                                                                                        taskkill /F /IM Madium.exe /IM Loader.exe
                                                                                                                                                        3⤵
                                                                                                                                                        • Kills process with taskkill
                                                                                                                                                        PID:2532
                                                                                                                                                    • C:\Users\Admin\AppData\Roaming\Madium\Bin\Madium.exe
                                                                                                                                                      "C:\Users\Admin\AppData\Roaming\Madium\Bin\Madium.exe"
                                                                                                                                                      2⤵
                                                                                                                                                      • Checks whether UAC is enabled
                                                                                                                                                      PID:8184
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.madium.app\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=8184.6804.14921333681247951010
                                                                                                                                                        3⤵
                                                                                                                                                        • Drops file in Windows directory
                                                                                                                                                        • Enumerates system info in registry
                                                                                                                                                        • Modifies data under HKEY_USERS
                                                                                                                                                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                                        PID:9148
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.madium.app\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.madium.app\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x170,0x174,0x178,0x14c,0x180,0x7ff8a58cb078,0x7ff8a58cb084,0x7ff8a58cb090
                                                                                                                                                          4⤵
                                                                                                                                                            PID:2324
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madium.app\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1816,i,12125364387869522032,13589680757017152143,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1788 /prefetch:2
                                                                                                                                                            4⤵
                                                                                                                                                              PID:8728
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madium.app\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2128,i,12125364387869522032,13589680757017152143,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:11
                                                                                                                                                              4⤵
                                                                                                                                                                PID:6904
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madium.app\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2396,i,12125364387869522032,13589680757017152143,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:13
                                                                                                                                                                4⤵
                                                                                                                                                                  PID:8640
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.madium.app\EBWebView" --webview-exe-name=Madium.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3640,i,12125364387869522032,13589680757017152143,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
                                                                                                                                                                  4⤵
                                                                                                                                                                    PID:6980

                                                                                                                                                            Network

                                                                                                                                                                  MITRE ATT&CK Enterprise v16

                                                                                                                                                                  Reconnaissance

                                                                                                                                                                  Resource Development

                                                                                                                                                                  Initial Access

                                                                                                                                                                  Execution

                                                                                                                                                                  Persistence

                                                                                                                                                                  Boot or Logon Autostart Execution

                                                                                                                                                                  1
                                                                                                                                                                  T1547

                                                                                                                                                                  Registry Run Keys / Startup Folder

                                                                                                                                                                  1
                                                                                                                                                                  T1547.001

                                                                                                                                                                  Event Triggered Execution

                                                                                                                                                                  1
                                                                                                                                                                  T1546

                                                                                                                                                                  Component Object Model Hijacking

                                                                                                                                                                  1
                                                                                                                                                                  T1546.015

                                                                                                                                                                  Privilege Escalation

                                                                                                                                                                  Boot or Logon Autostart Execution

                                                                                                                                                                  1
                                                                                                                                                                  T1547

                                                                                                                                                                  Registry Run Keys / Startup Folder

                                                                                                                                                                  1
                                                                                                                                                                  T1547.001

                                                                                                                                                                  Event Triggered Execution

                                                                                                                                                                  1
                                                                                                                                                                  T1546

                                                                                                                                                                  Component Object Model Hijacking

                                                                                                                                                                  1
                                                                                                                                                                  T1546.015

                                                                                                                                                                  Defense Evasion

                                                                                                                                                                  Modify Registry

                                                                                                                                                                  4
                                                                                                                                                                  T1112

                                                                                                                                                                  Subvert Trust Controls

                                                                                                                                                                  3
                                                                                                                                                                  T1553

                                                                                                                                                                  Install Root Certificate

                                                                                                                                                                  2
                                                                                                                                                                  T1553.004

                                                                                                                                                                  SIP and Trust Provider Hijacking

                                                                                                                                                                  1
                                                                                                                                                                  T1553.003

                                                                                                                                                                  Credential Access

                                                                                                                                                                  Credentials from Password Stores

                                                                                                                                                                  1
                                                                                                                                                                  T1555

                                                                                                                                                                  Credentials from Web Browsers

                                                                                                                                                                  1
                                                                                                                                                                  T1555.003

                                                                                                                                                                  Unsecured Credentials

                                                                                                                                                                  1
                                                                                                                                                                  T1552

                                                                                                                                                                  Credentials In Files

                                                                                                                                                                  1
                                                                                                                                                                  T1552.001

                                                                                                                                                                  Discovery

                                                                                                                                                                  Browser Information Discovery

                                                                                                                                                                  1
                                                                                                                                                                  T1217

                                                                                                                                                                  Network Share Discovery

                                                                                                                                                                  1
                                                                                                                                                                  T1135

                                                                                                                                                                  Password Policy Discovery

                                                                                                                                                                  1
                                                                                                                                                                  T1201

                                                                                                                                                                  Peripheral Device Discovery

                                                                                                                                                                  1
                                                                                                                                                                  T1120

                                                                                                                                                                  Process Discovery

                                                                                                                                                                  1
                                                                                                                                                                  T1057

                                                                                                                                                                  Query Registry

                                                                                                                                                                  5
                                                                                                                                                                  T1012

                                                                                                                                                                  System Information Discovery

                                                                                                                                                                  5
                                                                                                                                                                  T1082

                                                                                                                                                                  System Location Discovery

                                                                                                                                                                  1
                                                                                                                                                                  T1614

                                                                                                                                                                  System Language Discovery

                                                                                                                                                                  1
                                                                                                                                                                  T1614.001

                                                                                                                                                                  System Network Configuration Discovery

                                                                                                                                                                  1
                                                                                                                                                                  T1016

                                                                                                                                                                  Internet Connection Discovery

                                                                                                                                                                  1
                                                                                                                                                                  T1016.001

                                                                                                                                                                  System Time Discovery

                                                                                                                                                                  1
                                                                                                                                                                  T1124

                                                                                                                                                                  Lateral Movement

                                                                                                                                                                  Collection

                                                                                                                                                                  Data from Local System

                                                                                                                                                                  1
                                                                                                                                                                  T1005

                                                                                                                                                                  Command and Control

                                                                                                                                                                  Web Service

                                                                                                                                                                  1
                                                                                                                                                                  T1102

                                                                                                                                                                  Exfiltration

                                                                                                                                                                  Impact

                                                                                                                                                                  Replay Monitor

                                                                                                                                                                  Loading Replay Monitor...

                                                                                                                                                                  Downloads

                                                                                                                                                                  snt.dat
                                                                                                                                                                  • Path C:\PROGRA~2\PREMIE~1\snt.dat
                                                                                                                                                                  • Size 3.4MB
                                                                                                                                                                  • SHA256 d01a985c0fbd822bf8eecc80dffc1935575cbfa56374ab0808c510da67cb03e4
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  GameBooster.exe
                                                                                                                                                                  • Path C:\Program Files (x86)\Booster\GameBooster.exe
                                                                                                                                                                  • Size 231KB
                                                                                                                                                                  • SHA256 f13a0407af07f4537386e5109d16e4fefd23f515ae2ca8db04f3ccaac1ffaf14
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  hgsdk.dll
                                                                                                                                                                  • Path C:\Program Files (x86)\Booster\hgsdk.dll
                                                                                                                                                                  • Size 4.2MB
                                                                                                                                                                  • SHA256 c714754c5b3a91e2ae19016526f80049e1d550ce6298480786fed52126e7bfb6
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  cacert.pem
                                                                                                                                                                  • Path C:\Program Files (x86)\PremierOpinion\cacert.pem
                                                                                                                                                                  • Size 3KB
                                                                                                                                                                  • SHA256 9f19e7a7139cca8373b516ab1ae49c644aa1c8048e8c7aa5784774a081dcbb87
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  pmls.dll
                                                                                                                                                                  • Path C:\Program Files (x86)\PremierOpinion\pmls.dll
                                                                                                                                                                  • Size 884KB
                                                                                                                                                                  • SHA256 e471da417462c9f60181c27efe2355db4f0b3b4df6bd0d4097864a72677d8e5d
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  pmph.dll
                                                                                                                                                                  • Path C:\Program Files (x86)\PremierOpinion\pmph.dll
                                                                                                                                                                  • Size 806KB
                                                                                                                                                                  • SHA256 7cdd0b4b6492483d07ddd1869ea4c213d8d5043aec14117b1a5926093bedc7e1
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  pmropn32.exe
                                                                                                                                                                  • Path C:\Program Files (x86)\PremierOpinion\pmropn32.exe
                                                                                                                                                                  • Size 244KB
                                                                                                                                                                  • SHA256 b56a74fbe9b0a0c027f230a412dd69afbb697c41f31635352b37fe74d334fc15
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  pmropn64.exe
                                                                                                                                                                  • Path C:\Program Files (x86)\PremierOpinion\pmropn64.exe
                                                                                                                                                                  • Size 303KB
                                                                                                                                                                  • SHA256 f6de7618e24c0731e5ff77aa56f200d3c0e30e672a63c7d11b9717ece29e6814
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 71ccd39de69ec147afd8ad4337a36829dcababbf40897250380c7770de551242
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  B46811C17859FFB409CF0E904A4AA8F8
                                                                                                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
                                                                                                                                                                  • Size 528B
                                                                                                                                                                  • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                  • Size 471B
                                                                                                                                                                  • SHA256 dbc6983408748f19aff194ac43cd4afaac7132538b1f3a8f87c62447be748ef4
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                                                                                                  • Size 174B
                                                                                                                                                                  • SHA256 f7fda8895d1d56994e98d1aefe9a9a61f2aa0328326b24084377887f64d7ead9
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  B46811C17859FFB409CF0E904A4AA8F8
                                                                                                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
                                                                                                                                                                  • Size 170B
                                                                                                                                                                  • SHA256 e7ed17886ba1c4c7682805269c617b7a7cacdba609c4c4c8b45b26ec0659bd03
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                  • Size 416B
                                                                                                                                                                  • SHA256 c19e7612a5ed5a16b578932f3f2d4791b0b579bf839712e959227f4b4c259418
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  BookmarkMergedSurfaceOrdering
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                  • Size 6B
                                                                                                                                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  BrowsingTopicsState
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                                                                  • Size 649B
                                                                                                                                                                  • SHA256 7f44e72420a5e005ba7278da7531c78c461dca42ef028c68cef5a6fcb7e6d4e0
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 002110b208443c3b35633fbaa80a62f96e32f965a1f79fe332935226f7f1ab50
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  000001.dbtmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000001.dbtmp
                                                                                                                                                                  • Size 16B
                                                                                                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  000003.log
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
                                                                                                                                                                  • Size 216KB
                                                                                                                                                                  • SHA256 63fd1e0bf55127736486226a1983c2a8bdfad42b05fac88e33ba1d773d686937
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  LOG
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                                                                                                                                  • Size 349B
                                                                                                                                                                  • SHA256 63083d6fc201a2cbd5e10032f9bf3b19054d47a40d556a5b73c0a847900b795b
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  MANIFEST-000001
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                  • Size 23B
                                                                                                                                                                  • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Network Persistent State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                  • Size 17KB
                                                                                                                                                                  • SHA256 2d0ddb437710970b0ecdd012aa418e9c4dd5852301cf7948bbe91d1fcc4e554c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  SCT Auditing Pending Reports
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                  • Size 2B
                                                                                                                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Preferences
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 b0c7f3bf5d8b8ea1a1329240c8c8a0589dc06474b89f9c09af20bdb89a8ae5c3
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Preferences
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 a47abe8caab22d455dd8f9572db06ef6d1565b8489b654b0b24597fc1383fbbe
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Preferences
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 5d2cef51625e9209efb4f6b4b45cc5406aef7928960bb3b0fffa6a5c390c0295
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Preferences
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                  • Size 14KB
                                                                                                                                                                  • SHA256 3cc1d7a62228acc739959c6786c5ee03612a13fa755a1faea5b01860d0a0d011
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Secure Preferences
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                  • Size 17KB
                                                                                                                                                                  • SHA256 87abfd6483e055ddeb2f8fc2f483f91af443de3130ad7f6cceeeecc94a6c2511
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\fd4cc967-1cb4-45cf-9842-b007de25d29a\index-dir\the-real-index
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 d8037ed6dfe7653e2f0e01e17a58e4cbebb5099e5909c2b94110e2b98443581d
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index~RFe58a0b0.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\fd4cc967-1cb4-45cf-9842-b007de25d29a\index-dir\the-real-index~RFe58a0b0.TMP
                                                                                                                                                                  • Size 48B
                                                                                                                                                                  • SHA256 cac45b0539eb56f838b7f536f520cbd25e906aceacf3dd86997ea6e1faf0ffc3
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  index.txt
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                  • Size 214B
                                                                                                                                                                  • SHA256 1860323be19c43e69c5cb6f5f893a9731ff934325ddd0948e8dc84b1bcfedcc4
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  index.txt
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                  • Size 130B
                                                                                                                                                                  • SHA256 75a3a4bcf751e680dbc542114405118175f3f62534f306d72da4d9151cd4d646
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  index.txt
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                  • Size 132B
                                                                                                                                                                  • SHA256 831f881921c7d6c60c7f6f0b568b360722f4ba8c005986253b950b4b88b13223
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  index.txt~RFe588596.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe588596.TMP
                                                                                                                                                                  • Size 137B
                                                                                                                                                                  • SHA256 def2480b928f3265b0d0a64daba84b1292cb3c415be40b82e60a95d2877b21f5
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                  • Size 120B
                                                                                                                                                                  • SHA256 b0aaf80739f8af756770eb592134845a758f33f3847c687d48259eba227a9548
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                  • Size 120B
                                                                                                                                                                  • SHA256 ad6eda3b77346e271e14dd6396dbeb79817e8cbb18792d2972e887d72dcba13c
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index~RFe587eef.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe587eef.TMP
                                                                                                                                                                  • Size 96B
                                                                                                                                                                  • SHA256 7f1a590ed74c0fb339ec96140e5dd6d52fb4ec162583ea431bb4a8a91c6bcfef
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  32.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\32.png
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 bf77e0c65df7ce83532308d1acbf333098e1f4089672b67a9514a56144b1f1d8
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  16.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2600_320923716\Icons Monochrome\16.png
                                                                                                                                                                  • Size 257B
                                                                                                                                                                  • SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\0ae9406c-86ed-4787-b86b-f6cf5065a342\index-dir\the-real-index
                                                                                                                                                                  • Size 72B
                                                                                                                                                                  • SHA256 b37f7061fbf991b2a1ea54e05179de1a2777154d0cc9c2d783195aedc0cb02a0
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index~RFe58a90c.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\0ae9406c-86ed-4787-b86b-f6cf5065a342\index-dir\the-real-index~RFe58a90c.TMP
                                                                                                                                                                  • Size 48B
                                                                                                                                                                  • SHA256 008946d20393a030ec7bfb3cedcbc60d5a31878c8f8909eae7d412f481eaec91
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  index.txt
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
                                                                                                                                                                  • Size 78B
                                                                                                                                                                  • SHA256 8467e26687d0be631f47dbfec674cfeb8b3d688d55a1e42d72426439db607977
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  index.txt
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
                                                                                                                                                                  • Size 159B
                                                                                                                                                                  • SHA256 6e3ec2a04ffe04619218cc8879c409527cd22e60faccc0bd128996abb2cef402
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  index.txt
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
                                                                                                                                                                  • Size 153B
                                                                                                                                                                  • SHA256 1749adf0dc007f2a1e27fd5b79a9c34afee02e7466f926722fbbf0c38af53a83
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  index.txt~RFe5858f8.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5858f8.TMP
                                                                                                                                                                  • Size 162B
                                                                                                                                                                  • SHA256 37a26b2ca92a48c78e704cb35272cb0cde7974b018174f8e8201f2c5fdffc984
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                  • Size 116KB
                                                                                                                                                                  • SHA256 74e616cda5c4936ff53ecb0661945f45cd1d90bc8b7ab97fc51ce97d06862e98
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                  • Size 116KB
                                                                                                                                                                  • SHA256 ae2643e58b6c6506b6c1b5c9bb27fc630433e08fc4de5fe2f5495055d2c9c023
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                  • Size 115KB
                                                                                                                                                                  • SHA256 ed6953c83bb6f6f1c8e691af3c3402a77df596f400439973687319c72efee32f
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                  • Size 116KB
                                                                                                                                                                  • SHA256 e96ddc8f3f1016a5fadb70b6248e693bf58a1402cdab19ed4baa5c42a41e4b2d
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                  • Size 156KB
                                                                                                                                                                  • SHA256 9d542274bb3a039bbcc68e0b067acaec7bb6fc204bc603d4bb95e51246f60315
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                  • Size 116KB
                                                                                                                                                                  • SHA256 4b8a451b18bb76205d913cc488d2c1da97b5e7474761a7556bc4235837943e60
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                  • Size 116KB
                                                                                                                                                                  • SHA256 1b241ed08be9610b8272c8562d983d1785d552b05eb1d880cb01613c7bba7175
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  POicon[1].bin
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WZCPA0V7\POicon[1].bin
                                                                                                                                                                  • Size 4KB
                                                                                                                                                                  • SHA256 20b0f94844860501e115fccd5c1462b2e2c932041d7989dc51c6d885b3429d8a
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  OperaGX_96266741.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\OperaGX_96266741.exe
                                                                                                                                                                  • Size 3.9MB
                                                                                                                                                                  • SHA256 e30e6fd2b1274091b90975cb8e78d42457f5b8bceb50fa9e5e7033f3061cdf46
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  SearchHoverUnifiedTileModelCache.dat
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
                                                                                                                                                                  • Size 22KB
                                                                                                                                                                  • SHA256 7048b5d81341553ff7a7d3b0ed08e1b074e6ddf127cd70ac13a1ae2a5c01bf3c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  custom_partner_content.json
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.104\resources\custom_partner_content.json
                                                                                                                                                                  • Size 245KB
                                                                                                                                                                  • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  browser_assistant.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                                                                                                                  • Size 5.2MB
                                                                                                                                                                  • SHA256 4a44c678398145b0582ef30d245fc6f23f5492fad30fd9483fde5a7dddb9741a
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  opera_autoupdate.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                                                                  • Size 7.1MB
                                                                                                                                                                  • SHA256 17fb1f24af3af39239bc2cd31a19aa9e3eb3411a91dbadf3085f6b940651fead
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  installer_prefs.json
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 f83693371b8f077c88b5c3f6d77d7eb0642922a823c6065dcb773c1b6fdb7062
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  opera.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                  • Size 2.6MB
                                                                                                                                                                  • SHA256 7a633ec3d2ea30c8199d710cc7c982ad3c3f7742523405584ba873a228aba2bc
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  chrome_100_percent.pak
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\speedtest\chrome_100_percent.pak
                                                                                                                                                                  • Size 163KB
                                                                                                                                                                  • SHA256 4474d496b4eb082073fb439133728eed72da35f4519505c1c246ef2b9552cf49
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  installer.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                                                                                                                                                                  • Size 9.1MB
                                                                                                                                                                  • SHA256 c42dfc5097ef743182519ad03097afc72dc371c0bc3dd616afa4094fca8091d6
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Opera GX Browser.lnk
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\Opera GX Browser.lnk
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 a70b5f209bc408b7e1282b414cc2bcd3acb557972e39d9009a475560c8ebd3e9
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Opera_GX_assistant_131.0.5877.36_Setup.exe_sfx.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\assistant\Opera_GX_assistant_131.0.5877.36_Setup.exe_sfx.exe
                                                                                                                                                                  • Size 2.8MB
                                                                                                                                                                  • SHA256 aea99ad410a597e74390c1a4c41fd8b9a0847c555e62538f20690bc4f5081073
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  assistant_installer.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\assistant\assistant_installer.exe
                                                                                                                                                                  • Size 2.4MB
                                                                                                                                                                  • SHA256 e47c83fe3e201c5d2e39f068a59b75dc4c640bb2d77e330b00f2f7de47c5a264
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  dbgcore.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\assistant\dbgcore.dll
                                                                                                                                                                  • Size 196KB
                                                                                                                                                                  • SHA256 4a2e6daaac3c2f30d5d50ff17d758c7872149d852eba4fc8249682da49cba611
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  dbghelp.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\assistant\dbghelp.dll
                                                                                                                                                                  • Size 1.8MB
                                                                                                                                                                  • SHA256 4ffe74dd53a715011655419a9fb741a0699b4fe722768cee8267016fa931140a
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  installer_prefs_include.json
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\installer_prefs_include.json
                                                                                                                                                                  • Size 357B
                                                                                                                                                                  • SHA256 37049cbc6a90752b5624823e2e91bc9c37232b25687c760e228e7fbdee77d9d0
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  installer_prefs_include.json
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\installer_prefs_include.json
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 e4de01826247f4ded07954349f7d2f597f2bb3bb3c6392a491eb7cfad7a56d71
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  installer_prefs_include.json.backup
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c303e407-ea73-4588-a004-3f47ef7bcbf3 Opera GX Installer Temp\opera_package_202605281105011\installer_prefs_include.json.backup
                                                                                                                                                                  • Size 342B
                                                                                                                                                                  • SHA256 a96f9f9ee03952721533f1ca6e8bc75b28e35cd0de468aaa0e475cc815c53e7d
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  06fb42f5-640b-4a92-83ee-5b0ac4dafc68.tmp.ico
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\06fb42f5-640b-4a92-83ee-5b0ac4dafc68.tmp.ico
                                                                                                                                                                  • Size 264KB
                                                                                                                                                                  • SHA256 85fb5c175c96d10f36cf2340083591af309a6f664ab52346b5b83cd8e201276b
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  installer.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\7zS881E2369\installer.exe
                                                                                                                                                                  • Size 9.1MB
                                                                                                                                                                  • SHA256 0dc3f74b9cabb14adcfed3e6a4f17187a198880ae5d69516cf426ebde712dc2a
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ContentI3.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe
                                                                                                                                                                  • Size 3.8MB
                                                                                                                                                                  • SHA256 ef2734657b11113a433abb7ebac962e2bf6bf685f05c5f672997f01875430168
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  __PSScriptPolicyTest_vw54abcs.15j.ps1
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_vw54abcs.15j.ps1
                                                                                                                                                                  • Size 60B
                                                                                                                                                                  • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  LICENSE.electron.txt
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\LICENSE.electron.txt
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  LICENSES.chromium.html
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\LICENSES.chromium.html
                                                                                                                                                                  • Size 14.6MB
                                                                                                                                                                  • SHA256 20ebe818ce692f40ade041503ccc9ec5ec2ec636939aad4224af0203968dd502
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  chrome_200_percent.pak
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\chrome_200_percent.pak
                                                                                                                                                                  • Size 252KB
                                                                                                                                                                  • SHA256 3e815b1223026c0bdfffcee62a58885e0ccd99d77f0b950778d109832e38e9cc
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  d3dcompiler_47.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\d3dcompiler_47.dll
                                                                                                                                                                  • Size 4.7MB
                                                                                                                                                                  • SHA256 289767b49dc8525bce262ea06fee4ef9fced2e131a55b25654ce871c1f0498b2
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ffmpeg.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\ffmpeg.dll
                                                                                                                                                                  • Size 2.9MB
                                                                                                                                                                  • SHA256 61bedb236f682de61b2138d2e1f4dc63960822f286314bc7e5f8d421533013bf
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  icudtl.dat
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\icudtl.dat
                                                                                                                                                                  • Size 10.0MB
                                                                                                                                                                  • SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  libEGL.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\libEGL.dll
                                                                                                                                                                  • Size 491KB
                                                                                                                                                                  • SHA256 991deeef6d96f2ef9cc4a249a8e3694eefc8b56c2cebf5c0e122e5118fc1e76a
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  libGLESv2.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\libGLESv2.dll
                                                                                                                                                                  • Size 7.7MB
                                                                                                                                                                  • SHA256 4a2b859c20b7d2837bf9cd72175f36c8e70521a3a2d8cdc0c4751c6c1a217594
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  resources.pak
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\resources.pak
                                                                                                                                                                  • Size 5.8MB
                                                                                                                                                                  • SHA256 91bb6f1236efafe0864d16b5ce2f960b4deda1b040041aa207f70da8216be920
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  app-update.yml
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\resources\app-update.yml
                                                                                                                                                                  • Size 92B
                                                                                                                                                                  • SHA256 21954b5fc4927b398cd0b3c51018c04f150f16e0c34e73256576935f29185bf2
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  app.asar
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\resources\app.asar
                                                                                                                                                                  • Size 8.5MB
                                                                                                                                                                  • SHA256 980724e5f5f8130f973d82feef5f9070972b1eca27cef40033f15d2907b40e82
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  elevate.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\resources\elevate.exe
                                                                                                                                                                  • Size 105KB
                                                                                                                                                                  • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  snapshot_blob.bin
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\snapshot_blob.bin
                                                                                                                                                                  • Size 314KB
                                                                                                                                                                  • SHA256 3fe7442f6fb627a5926374c63bb5c7ef66dcd2f5774e12ffaf02ed354c497ace
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  v8_context_snapshot.bin
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\v8_context_snapshot.bin
                                                                                                                                                                  • Size 683KB
                                                                                                                                                                  • SHA256 e649ebda6e8b11fe06c341fc9a35c07c7c9c5fe34720f4cdbbc5f593f9ab13e5
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  vk_swiftshader.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\vk_swiftshader.dll
                                                                                                                                                                  • Size 5.3MB
                                                                                                                                                                  • SHA256 a57e34f513411044c242f541324cfdad990ef8b4b37267e399ec83125664050c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  vk_swiftshader_icd.json
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\vk_swiftshader_icd.json
                                                                                                                                                                  • Size 106B
                                                                                                                                                                  • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  vulkan-1.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\7z-out\vulkan-1.dll
                                                                                                                                                                  • Size 898KB
                                                                                                                                                                  • SHA256 b3f2c314d01a0f056a8d07696ee85af42592adf55d07bea4e9827c0b90c874f1
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  SpiderBanner.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\SpiderBanner.dll
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  StdUtils.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\StdUtils.dll
                                                                                                                                                                  • Size 100KB
                                                                                                                                                                  • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  System.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\System.dll
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  nsExec.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\nsExec.dll
                                                                                                                                                                  • Size 6KB
                                                                                                                                                                  • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  nsis7z.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsbAA80.tmp\nsis7z.dll
                                                                                                                                                                  • Size 424KB
                                                                                                                                                                  • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  3dae7289-0d48-4ae0-8798-dc1406a339b5.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5796_2030141480\3dae7289-0d48-4ae0-8798-dc1406a339b5.tmp
                                                                                                                                                                  • Size 472KB
                                                                                                                                                                  • SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  1b2a358d-d290-4e45-9c61-c1958592ed1e.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5796_657338968\1b2a358d-d290-4e45-9c61-c1958592ed1e.tmp
                                                                                                                                                                  • Size 2.6MB
                                                                                                                                                                  • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Icon_Light_Neutral.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5796_657338968\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  70260538-90b7-48cb-a69c-b190ae5ad516.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5796_7389092\70260538-90b7-48cb-a69c-b190ae5ad516.tmp
                                                                                                                                                                  • Size 14KB
                                                                                                                                                                  • SHA256 1063c0cf8fa368edbeb9d05655366387b9b4c5c4e30b6d124ff31ea4517a6b3f
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  579d3b83-4b3a-472f-bf7d-b5f239d06982.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5796_791190589\579d3b83-4b3a-472f-bf7d-b5f239d06982.tmp
                                                                                                                                                                  • Size 4.2MB
                                                                                                                                                                  • SHA256 1ff1095b38c924b21a79dde9a181df04766233dbca27e75352afb986428dcdcc
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  favicon_opera_one.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5796_791190589\CRX_INSTALL\favicon_opera_one.png
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  pmls64.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\~os6DEF.tmp\pmls64.dll
                                                                                                                                                                  • Size 1.1MB
                                                                                                                                                                  • SHA256 877c2894f42bf078dfa36f06b543490d800a32c4f5245464bfec300b56867661
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  pmropn.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\~os6DEF.tmp\pmropn.exe
                                                                                                                                                                  • Size 7.4MB
                                                                                                                                                                  • SHA256 b8e134c1518903be8b260f821d1896b521f7f70956090562b3cc71b71bf8cb1b
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  pmservice.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\~os6DEF.tmp\pmservice.exe
                                                                                                                                                                  • Size 4.6MB
                                                                                                                                                                  • SHA256 f76c45ac8440c5a36096d7956bdf933bfff268469d1a73573c7f001f790dafa1
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  settings.dat
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\com.madium.app\EBWebView\Crashpad\settings.dat
                                                                                                                                                                  • Size 280B
                                                                                                                                                                  • SHA256 b3742d7a2372a25aa7aa15c4007df9280f7eed7cad87ff38f83407f1b61d66f1
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  index
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\com.madium.app\EBWebView\Default\DawnGraphiteCache\index
                                                                                                                                                                  • Size 256KB
                                                                                                                                                                  • SHA256 f90fc4c46406e108d996c7d6db6c055627eb4730f6d7dd3f69f90069ccbc3ee5
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\com.madium.app\EBWebView\Local State
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 e94ff7760e145e316a1e5c983a10ce7b149dcf7bdeae343670f43cd08fd5b00f
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\com.madium.app\EBWebView\Local State
                                                                                                                                                                  • Size 3KB
                                                                                                                                                                  • SHA256 f55b2fb3fa44dd0ec6baed728d9bea40f8a6f1daea6abb3660951bc05671f394
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\com.madium.app\EBWebView\Local State
                                                                                                                                                                  • Size 16KB
                                                                                                                                                                  • SHA256 248a55036d4c5eac57cb1fb622e7ddbf5880657f1b5b4f56b2a55865c079dc81
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\com.madium.app\EBWebView\Local State
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 9a4a840806e12f45692d97c077626c70c835648821c2e3f9d21e8050a88f9812
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State~RFe5bae8c.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\com.madium.app\EBWebView\Local State~RFe5bae8c.TMP
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 beeaa30699dc286985005976ef8f03025baa886ddb59d45826e16f80fcd166d6
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Madium.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Madium\Bin\Madium.exe
                                                                                                                                                                  • Size 15.0MB
                                                                                                                                                                  • SHA256 edaf6676fe03d0a552f07d7fd438f34d8fe79612c80a365cb42fba679bbea530
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Opera GX Browser.lnk
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera GX Browser.lnk
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 7667edea23ee0b4bbe9bd0e807787072bd832c33d579834a25ca4359fe8c2431
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  default.dic
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                                                                  • Size 2B
                                                                                                                                                                  • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  93b5a6c5b550e4d1.customDestinations-ms
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\93b5a6c5b550e4d1.customDestinations-ms
                                                                                                                                                                  • Size 20KB
                                                                                                                                                                  • SHA256 a794b9ccf8c67b024a7f4a701de1602df775fa801775158cc45c34572f453c18
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  93b5a6c5b550e4d1.customDestinations-ms
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\93b5a6c5b550e4d1.customDestinations-ms
                                                                                                                                                                  • Size 20KB
                                                                                                                                                                  • SHA256 cf15214eee9332c4307d33c841b7e45193c4e6f0bcd90dc9c423ad919fae6e6d
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  settings.dat
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                                                                                                  • Size 40B
                                                                                                                                                                  • SHA256 511d41708915fd2fb1fb4bb519e33d418139b1a42c4a74f778d3697fb4057d6d
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  0322e20d-1c2f-433e-a54b-97ae384f0459.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\0322e20d-1c2f-433e-a54b-97ae384f0459.tmp
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 97269e41e4e75d472b408323136e434749738f932ea95c522b88562c4bb357ff
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 31dc8de8802168a73422daf5aaf03fa3aedfb4f5eb618849f13bec22557a08b4
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index~RFe5aa3f2.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index~RFe5aa3f2.TMP
                                                                                                                                                                  • Size 48B
                                                                                                                                                                  • SHA256 1f0621043b1587b51dc4b66354f279755e5fcf42871d167cadced858b3db841d
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  messages.json
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  background.js
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
                                                                                                                                                                  • Size 17KB
                                                                                                                                                                  • SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  twitch16.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
                                                                                                                                                                  • Size 370B
                                                                                                                                                                  • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  twitch48.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
                                                                                                                                                                  • Size 921B
                                                                                                                                                                  • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  cos-bridge.js
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.4_0\cos-bridge.js
                                                                                                                                                                  • Size 173B
                                                                                                                                                                  • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  cos-content.js
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.4_0\cos-content.js
                                                                                                                                                                  • Size 502B
                                                                                                                                                                  • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  main.js
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.4_0\main.js
                                                                                                                                                                  • Size 47KB
                                                                                                                                                                  • SHA256 6aa809057957dd9c15900268b817b8ca0f87e0254086f80dbc58fa5b824819b4
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  blacklist.js
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.42.0.1_0\blacklist.js
                                                                                                                                                                  • Size 76KB
                                                                                                                                                                  • SHA256 83ef0c4bab7e36094651af27663250375fbda2b353ac4387e9764c86ea9a9bca
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  common.js
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.42.0.1_0\common.js
                                                                                                                                                                  • Size 1.7MB
                                                                                                                                                                  • SHA256 36cca7089cd0bb6d030d1322fe52ea46ea9ac449b7ed8e6ff54c3d499018cf0d
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  favicon_opera_one.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.42.0.1_0\favicon_opera_one.png
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  service_worker.js
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.42.0.1_0\service_worker.js
                                                                                                                                                                  • Size 65KB
                                                                                                                                                                  • SHA256 e34a0af204d3160d57a1291935210225e2998d21cc13af921a07d9ff1e35a7c8
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  vendors.js
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.42.0.1_0\vendors.js
                                                                                                                                                                  • Size 2.3MB
                                                                                                                                                                  • SHA256 ffb55be37b680d25fbf2c115ccdd29a14776bbfa4b413f7539652da500d6b55a
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  webpage_content_reporter.js
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.42.0.1_0\webpage_content_reporter.js
                                                                                                                                                                  • Size 113KB
                                                                                                                                                                  • SHA256 e256bb52553fa2ecec9d2cb24bc088c6d8ad004a0961b12a9aaf046ba9a0d911
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  background.js
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                                                                                                                  • Size 86KB
                                                                                                                                                                  • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Icon_Light_Neutral.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  popup.js.LICENSE.txt
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  rules.json
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                                                                                                                                                  • Size 839B
                                                                                                                                                                  • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  055b04a8-e376-43ae-9a54-6f8d7597b667.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\055b04a8-e376-43ae-9a54-6f8d7597b667.tmp
                                                                                                                                                                  • Size 27KB
                                                                                                                                                                  • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  a364de9d-0c9c-4a85-ac92-d9a96bb21ecd.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\a364de9d-0c9c-4a85-ac92-d9a96bb21ecd.tmp
                                                                                                                                                                  • Size 27KB
                                                                                                                                                                  • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  d066ef1f-30f7-454a-9615-4c60e2a05873.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\d066ef1f-30f7-454a-9615-4c60e2a05873.tmp
                                                                                                                                                                  • Size 27KB
                                                                                                                                                                  • SHA256 9b19632a65774b14cf35bf7d0b242cba70e8b52bb6667bc6f3d0e8e203048dd6
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  d3f200d6-b25e-45f2-8ab2-719419dc814b.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\d3f200d6-b25e-45f2-8ab2-719419dc814b.tmp
                                                                                                                                                                  • Size 27KB
                                                                                                                                                                  • SHA256 f7654bd59a0eca449dce5ce6140898342904778a307f45461436ad5a24ee913e
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  e9839e2c-ce5d-44b5-be83-01c30f8f0fa1.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\e9839e2c-ce5d-44b5-be83-01c30f8f0fa1.tmp
                                                                                                                                                                  • Size 27KB
                                                                                                                                                                  • SHA256 3b98c688efdb41542cbe904719f613ae8c5de8a743264875dd8b37c2dcf7cf92
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  faf6845c-e4b7-4973-8ce3-65dd6ce6c2a5.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\faf6845c-e4b7-4973-8ce3-65dd6ce6c2a5.tmp
                                                                                                                                                                  • Size 27KB
                                                                                                                                                                  • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Network Persistent State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                                                                                                                                                  • Size 5KB
                                                                                                                                                                  • SHA256 7798f7883bdee17f59ede2e30c17bd6f9938d6a9de30a88513a4ff704b790676
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Preferences
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 0a3c8ee39cdae05bb74ef982406befbc50d9eef549c89eb2b1fdea0a05fdf319
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Preferences
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 e532d1868475658301382926254d2a5df3008d77c6b4074d33fcdea3014ab179
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Preferences~RFe5a6dcf.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences~RFe5a6dcf.TMP
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 9e48ec5e31733aea751e29187e7efa632562f9a23b7ba0fd6ccfb2cc1325cf6e
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Secure Preferences
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                                                                                                                  • Size 209KB
                                                                                                                                                                  • SHA256 4edac168d26bfc759dc11ae8e01277cea6b6df26678b8cba351e3b39d9d416e1
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Secure Preferences~RFe5a6505.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences~RFe5a6505.TMP
                                                                                                                                                                  • Size 85KB
                                                                                                                                                                  • SHA256 c260be04c0ff91f9153986d15b8d257badcd3cbcc768b95ec216544eccaf4be0
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\91fd2457-3808-455d-aba1-d29b4a385719\index-dir\the-real-index
                                                                                                                                                                  • Size 96B
                                                                                                                                                                  • SHA256 9694097d0735ad83f8c3f63ae3c6f210e47d121e34e9ec2893442f04c6952b6c
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index~RFe5a9b09.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\91fd2457-3808-455d-aba1-d29b4a385719\index-dir\the-real-index~RFe5a9b09.TMP
                                                                                                                                                                  • Size 48B
                                                                                                                                                                  • SHA256 1102e2f588d4fd5a7910a4ccb863d13bfb8e995ef8b47dbd0f90cad121eba4d0
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\f2b209e8-8032-4fc1-b04b-6ee1bdc3e14f\index-dir\the-real-index
                                                                                                                                                                  • Size 144B
                                                                                                                                                                  • SHA256 37c73555bf233e6a3ed6a0254fec2642506e8cddd5a41e7e986aba669e93af82
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index~RFe5a9a7c.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\f2b209e8-8032-4fc1-b04b-6ee1bdc3e14f\index-dir\the-real-index~RFe5a9a7c.TMP
                                                                                                                                                                  • Size 48B
                                                                                                                                                                  • SHA256 cb7dfcebced52ba368d9fef3326009da5f99581039a188d63bcb39b09458f4db
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  index.txt
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
                                                                                                                                                                  • Size 208B
                                                                                                                                                                  • SHA256 43b96470166baf4e4389de2facc1fe5e80be4950777d1a6a72fe7816c487d6e6
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  index.txt
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
                                                                                                                                                                  • Size 203B
                                                                                                                                                                  • SHA256 452b83907b33c06beca476472b65b672bee9c1a51e5333ae39b66501f66af3dd
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  index.txt~RFe5a4caa.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt~RFe5a4caa.TMP
                                                                                                                                                                  • Size 141B
                                                                                                                                                                  • SHA256 f7a530401b17f548e962955e04fe059deca671ea6b26d19ad2484593ef1e3914
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                  • Size 456B
                                                                                                                                                                  • SHA256 b7a2383c0275ca4f8c3dccadf0d74cc668df04427c9342ca5cca3605817b90df
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index~RFe5a9d89.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a9d89.TMP
                                                                                                                                                                  • Size 72B
                                                                                                                                                                  • SHA256 e5e5c00a88e5eff2f030574b4606e2a98b938f5f266746a3bb4e09be2029964d
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 a41b58bf69155510feb6db31858be878c6e3a936f5923abd4bd85019758ee645
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 62293a431b767509a59a1e144812bb34dd36e8cab72ab92477d11a4fb04886fb
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 2232a2c4a40e14dbb8f4d3857103aa0b520b8ea2ba1867d5a818ee498da911f1
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 94cb14920b60f1376aba9bb97eb9967ca21391f7e4c4eb6d0cde386792a4729c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 b9837746866f43bde214144d5e74108b217c6feafcf9b79b92ad49a115fd6df4
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 2a66458f115bb0ebfd49c53a7fa24081572ad881503a081ed88014ceee0f895c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 ae8d12fcbbbf1d7b96dd221b4f6143503fb6d3e7bf16e54528564c0638dcbfdf
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 53e7ebc66e415f822c314e00ce03d48aa906c57b18da63ca89a3c80d4337e17f
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 72a99d58a3fc49902ea3f8e60df31462c39d30e918cb3b5071e409c22cdb0727
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 d18932d3711e57af2bde3c81de1820b09501295558bc9018583e5666d278a8d7
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 90e4446eb86a61fa6b8ecee18d09d84c041123301fbb7109711dd6f186ed786d
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 a239a3c393f95314eef62da9e66e4ca81ef284a0dbf36f524fe18d44df6300b7
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 f8a79a152650edb0f59cc1ca36a0e54b7861380a6f2df477d47536e345b8bcd4
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 bec8966efd284f65c0e2ca6af8a93450a74b4e6d7f045ecfc42fbd88fdeb7825
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 fe8367d19d4d3d90f2125584bfe028e61a9f43de3c090c137b0441695ed7a022
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 3d06d8097b13adea76dd47e99cd5af0a1740cf0114521f61634429ebc923ae9a
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 4d96357e597396f599ab90ace1a4f7b112a6563fac9a09f08d5d15a119be8632
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 6eeb49254ac95dd05a0935db6b3a71d45dd526e728f4e172c40a7bfb3360d112
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 8e498f1463f3c3270add257d34d88e6e63988b9cf0ed10eb12b018564d9227b3
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 5df0dd8a41f565ad9fa2532bdadafa2da601639e1a881cc4fa8fd1674c4b1565
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 11KB
                                                                                                                                                                  • SHA256 7aea5e612b76e9ccec83bfa7eedcaa21cbbb6495b3cde7ccbcefa6475fa1c39c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 11KB
                                                                                                                                                                  • SHA256 50e8342823cf31ac5a9621732aeea8973de98162e3490bd5f5ebecc4a63f5d86
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 615e5b4ffd5ef0fbb51f4118f2111ce84a07a432176f9f5f83ce4cafc348bd8d
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 558dca49238da362ab7e60c69a4ab07d8484e80a7c40af56a7e8d8679637c00c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 770a5c59d4b4b469fc10ee73be08c8c21c74637a63ee6f14cc2d4b5874069327
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 0b04b1f19b8cdfc117c34046022aeeb9523650e5bd3f7db6e7d9943374f48072
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 d455f050370bd00dffbe35849ba15bd4d75acc3e00295011cd33df4919dc8ee2
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 664aff29978e6d21c3ee5d15a154eecdd557aafe5518da92a00f598cc09486e6
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 15fc6ce5c05b015c197b840e732c54da04ed568d34c812429c30b756ee364e17
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 f4d6b19b8533593ce9b2670f92863e9641d04f89367a3cb09908d1c57b10f7d6
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 66814543127d5c9798b6e3ff5b22dc14c0df440410690daccef5ce91bfeedbeb
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 541B
                                                                                                                                                                  • SHA256 c52c49befaf964f7bca6766f71e717088110dd246ce1eda74668a0f3b8a0852a
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 653B
                                                                                                                                                                  • SHA256 bb048a98821f98221946311bfd2caf158b1dc76c6c62098def1e2bcd5671d21d
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 957B
                                                                                                                                                                  • SHA256 dfe57fab3b2eacc485c7bd4327e8ba85b59f2e5766cd9612406d6b064871f591
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 1b52c83f613ef53ede94d900ecc967874ef9e860b9350672e637d9272d7587d6
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 6689e0f0ba50344ce6ddc035172e7118b96371c62eefa8bcc84f6ad553601b9f
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 11KB
                                                                                                                                                                  • SHA256 ebf60ce1d81aa4f05663d4295e72c43dca68871b1ab8e6cd16a3adf8389d75d4
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 11KB
                                                                                                                                                                  • SHA256 d176131be4ba231e9f04c1a92a062ac9e0fd4d58b50539ad7af31a4d5cde161c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 11KB
                                                                                                                                                                  • SHA256 1f4ff0956e3d0edefd914aeb2469f36788d1d35502e80ab4eb114ab0f9b8d076
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 11KB
                                                                                                                                                                  • SHA256 fa0bebd4e70082afde62576b301585797fe6ca51ac0d4419d618d2485f31a6f9
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 f80997866a52db1e8a4e3c8515ebd001f0955ec22a7ee6ac13239d90b414daee
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 c10cc3259a498a7f72bc2ebeeb053496c77f6a6e22b007354d0e6289925c8408
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 781B
                                                                                                                                                                  • SHA256 314f835faa97e10cf05fa7ee8cff765b6c5f579c05d01f801e07a573df223a59
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 731529b2b60dd4e3d6b95bb4c5e9f0c119e7312b0259b24ace173ddf2601be90
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 a722ebc6eb23aaf10ec806aba09fb96500b6a9738455c696b19b6623bd506753
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 54e599944b5bed5f9af198d9401ee0c10eb6327a7158ad7304d4ec65a3c43bf3
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 87abdfbce24ff275d0f4055320e26d300dac9cb144430c0790805f7c4e0b05e5
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 75a38699f0cb32cb6788b4d82f86a4d68356158c1f9f0b0a073d65efb8d1ab22
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 9a1baf505775b9e869d2ee15e782ca946a139ce63b51ba36ae89328f7f436933
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 e6c6db40d905542107a42e8c3d133c2a59b48f2519cc4762ad4f6154470c541e
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 9dc5aed1569e23505e90a215f2b362fbf1a0b0fca2fca317060f94d0778678bc
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 0871daf945f4ddee136a0a8c5584bf0529e6eaeef33fd7a85a3c0c504407857e
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 a3136bbd6fa6d5d510f10ddacd5cfa9a1bab89d7e1289f4b3a9e045f6e0ea207
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 536e8b06338beefc571a8527491b44e28a0651daae67bbb096b103513f9de4c8
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 61d165d0c9f34e7dcd6ff9f0d7500896090c07869c2294c20c0da3fb8770a24c
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 30b7f69b98e23ef771dab97a3fa5e00e4bcdfa0b923c65272e90253d253b3557
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 f7b4961847dccabb19f89fbf655e66aabe63be9a36d10505f4477b91a8a16f0d
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 dd417f107f6d0d156fe4393d5f11a334b41130a3246cb2580b9a24e20161447f
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 a9f1824b381997c2f978cdf7c933dbc7d8f12f617c96aa2ea2e393124dfcafd2
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 370ab9ae6414f08d2d9b1e4006a1a3523594f41ba58f38d5d00b803d306daecd
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 9a1d9564e1093470ec1fdf20e0f165169294f3c49989413e75f01dfc1b948ae8
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 dbf35e0e90e8f58ec3efa15c78cc7fec91d3da50613e7717f61218bf2dc17c64
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 2927e861d613ea87b022cf4c2ed0537fc22ba7bab3ab841e5f7ead34506731d2
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 cb497781470210f5ef0a780ce6bdc23ac9eaab957feb70c3dd140213c4b9b24b
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 09a5036147a934c47ae0bf3cc97ba6f4082b4566db5321e15ceda13aa3e61f30
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 254281346b1dd87f7470e8b11a96eff8f50c90042f3908bebc0810756ed0b975
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 432610de52466a8994499847a9d257932ac39e77f29b7bf4ab82faecccdc9982
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 309964224ae422ce1ea2c35ca102b3b09cd018550ae6a7992606bf4811034227
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 4a70c3ba8007417cc8b785c2deac2e735cbbc28c239dafa76585dc767b85284e
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 8cbb6cfbec3a48b39e96eccc083fa0150ed33f39effa98711deed8cc93d2df3a
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 ea2f8c10fb12b3cebf3c204df83d98ea9fb3849bb1313093e9831118a9b73e03
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 5589ebdb054b46c269043faa7d434bf450b75456eb0f050059eb77e646f1bacc
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 cd6cebd81813f010e24cd12f83cf9dee6d427147e4490a054fac1e3a6060463e
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 edc8a9ed77ab236aa49ef2efc15e36013c2884246c909afafacd9daed3e42e80
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 8eef1310c74ce067300484f754c8ed072f23dbf306f23c19b33cdcad88f068ed
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 2ad34c8f3726c7ffcb7a558a787e4e439c19fd388f76ed8c4cf32c51a87291a4
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 c28dc79b36e69a922e96d1839b94fc6eaefda8ccc5afec2a25312dd6d4cda738
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 ac54887e26a38e16cf4cee2b9e720785966cff5cc856e4344fbe775c0eab3f7c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 dfb6e9c3e04742e315f5e978f7cb4d0fa72daea30f671ff1cd3b5c7803398fe7
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 babbbfe01fcde692f18f5cf0187a197a63c2eba951fe9f059ceadf1466bbfc91
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 bf6f1a7f23744e47768a2e876596cd87a86039bc42347a87a4e6b48d1aaa2092
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 50693848a217c2ff9adc48dc070078b11c24b44a04b042be0a8209c75646c9ab
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 529943460a63ed056484558f830342643c42a56693559590955e24d289143d36
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 fb1a054a6c13a2d420c0ec54eb4b6924925cf4c2bdadb996431859e713bfacf6
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 11KB
                                                                                                                                                                  • SHA256 69476fa47d6d79f55cc47dc0bccf2255ae3397d06f767cf04e69c83159157e16
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 494cbb51b4f4f0d85ba9df9c0479a73087d44912f1b81d365f85ebc6d0df5b65
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 87d3bcad392d9542040c8498bc2d34abbda614d07121022b037ee6ca9a0f88df
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 5a9c61c722c6ee979ab87d21d9b5a4b9d87a99ed9a70f50854ba5371b4e0d571
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 828705ffcbcae1d8dd0b6ea480182f9aba41336edef56609ab8a083b3516ec4c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 6e1ae8d14f32ba0aeef74961c1dd9a748e5a686883307714e1bc6838e0e61168
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 18fb82aaaee62b7eee4e27b1aa7b3dedf519639b685e76211ac2a08cd4c3d547
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 4811184fafd2f3c80f38601034dfefbc4e31b0fae64117b7f762b9d50a7bb253
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 d31847e57d2fcf706fa2b36abcaff56f1cd93b5831b940819befc65cd529e80d
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 5ede33c82d7cd40bb536382c57f0ee8a982e6913d1b9630f096ff8b3f1fd4bf2
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 564453d427ec3b0c11e53f441f6c663577c577d86dda13ace8c45531b35fdee0
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 0b7081f2d583af0a6c6b9f44624be8fe17281d5ce6bbc735abc8ff9b0cfcd6c2
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 3728108e991089ff1485d2f98141dfe45bc8e05349723daa0a50cf62c16c6765
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 a0625939c2794875741975a456bc6807bf147e2eba454eabf7d9430381fb2588
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 55a08398cb0e329bbdde8660f4bbc5be8d7883599bb9b5c2db7306e4df11ec75
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 e64a9a3332bf268fdd4168831d79dd2ee280b3ec485199c655993824dd2d3c3b
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 3c0177d650b2f89597a88352e15df5b270e504e19ebdc203bd7c2e14003f46c1
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 cad8531e9cc7246b6e9bc8ae212ec657f0b819c42453641f4e45d314ac4af79d
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 3936d7059134a7fc5bc58dd26a101bd19bcbdaaa89ebd56676b84d5399535770
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 c66074a018e1231446fdf36e1ce9c7e0383a4b26492de127f7f6775999ce4507
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 9f3cc3ac483b23ff4cc65158c47552fdd9c907faa6097b0e1878335310a9fa30
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 44e8d2d5ec98fc21dab8a963e81ea00d83cf853b8c2168fa7650c1aa2e82ede5
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 867f3d39d690d847795f21e053ea7e82e68b13aa91c7b0dd8db7b5bc25b28864
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 bbfaafff58ae1e0642acaedd39dbc39c495d6b9c77cff7575ba16c8ab497c986
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 77cf257c797bdead113082b2ef2e5f25bc1ea169cef7596898cbbfcc8b93bdae
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 1a00a6600992e456b982449a9f5ec4f661a3b6671e60507d3a8014ce32a05854
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 71382ad0f446debd8768a23ec9f88d66188e75446baf67c5afdaa3d50aa812de
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 fef375d3bfc9bd941071be6c96e2d9a9b972d43104cc6aeafa594ef16807b41c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 3a79fbd771e84f5bfdb537b30e24ddeb9f1ac830720269610550d244baf06c8b
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 806af79b6fb66917dc4a491a4bf5d839eac7bed0ebb1b3c685707cb5b798cba9
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 1386da931a52b5de88ced1694183786a8f0376f41f4414d6435bbc1a61cb5b0f
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 8f8a3ec5f5f09c270ee957c1c2b1e458794a8028852336ee29bfdbdc5aafd576
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 f7cd5a215671a2f62e35ee37fa2400fa64da3a1bd94baabbcb7e6195ba7d0ab5
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 7bdaf7b2c6b3ba707898b1a7f84501a8924b6619c6c8284c1c910ac2fd1daba1
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 d73d3e4d6dbad4f89ac97ef645efdfeb4b68434e8069392c2c742f86ca34d080
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 5d28eff8f8d4eb8a3ab2722409fd33745bedb48f8c950de0c7ea5fc21bcb8e3c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 8d006c4ca5cff83a12e9f78828ea02aa35a94b5139745b993bca99909d263b02
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 ae54b0b3d632e5b4ec9caa5ac17e459df7f57a37337151dff53f60ece0bb364c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw
                                                                                                                                                                  • Size 13KB
                                                                                                                                                                  • SHA256 cf56b24ca43661add33de0ddca35704976321fdf96cb800ffd5603bde933c762
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw~RFe5a1bd6.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw~RFe5a1bd6.TMP
                                                                                                                                                                  • Size 429B
                                                                                                                                                                  • SHA256 511d8656ed38b1e76533a0b99dd886a05110aa79ad43cad547b594831f9f5c6a
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw~RFe5a2348.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a8aa7fd3-89b1-4ce5-8e3f-6877c2019251.raw~RFe5a2348.TMP
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 9bfcc14029e12d01a593ae2619acb90f749fa81a116cd55c80a88dc4e5471a7a
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  b899764f-d27b-48d9-adbe-5263cb43a27b.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\b899764f-d27b-48d9-adbe-5263cb43a27b.tmp
                                                                                                                                                                  • Size 162KB
                                                                                                                                                                  • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 91b522aee8e016652ea74f121513e27dba9e1e662bbe46378a4ab6ca060c7887
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 874B
                                                                                                                                                                  • SHA256 458f68a4074ae80d88b643ad84ccd10b00b304569e6658a0153d04ad115e30b0
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 975B
                                                                                                                                                                  • SHA256 e8cddd4ed89c03876c4fb82836b9754e9f3977fb816629dc03397a0dd3be3c7e
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 94a7d5efd032e50785e5db7fec5c189407e6dde7b96bfc3d0726f10339fa1b2f
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 ca80ebc2a9e1c2dbdfa87d5666921c966d9ed569c295a72a7c52accfda24968e
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 e4321450509ca835960c28285711f4a0a398113fcc2d815417e5c0bdb34362bc
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 692B
                                                                                                                                                                  • SHA256 2f1bc0afde7cd365c5b2f4fefa1bf5cdd6ba1e34bf6522619906d3033e0bfd6b
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 507B
                                                                                                                                                                  • SHA256 9b1e9eb2fa63fa818c87bd9fbf2e86b17e0fba8d38d8e237b53584e5cb3d028c
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 599B
                                                                                                                                                                  • SHA256 2518f2ae26b0a9b6db0d95f50848d26ff7a4c02853d6b90bb5e94f398de2dc04
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 0d8cedac743c462f4a02638499151923a6630da3c97e6d897606ce3aafb3c35f
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 3KB
                                                                                                                                                                  • SHA256 bb8e1113cee8a2ff97109be04606ea5818ec043d6b11f7e827e137cc242e3f1a
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 3KB
                                                                                                                                                                  • SHA256 d7078e83b4733e0dae58c8d3563aaf8db48401dd21af828547d1158a9d839b4f
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 3KB
                                                                                                                                                                  • SHA256 be6ce48e020f20b8a9eab9961daae5f00b8bf5c91d7b4fef3d5edd3e0962fabb
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 3KB
                                                                                                                                                                  • SHA256 fd5cf512673e82162e509ba61d09b3353b07a44bdea495ad4810391116a6c5c6
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 4KB
                                                                                                                                                                  • SHA256 1bb9a60f676fad635541305e214dd2135652c0819de2caef0ea78361753df9ab
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 4KB
                                                                                                                                                                  • SHA256 c242bc51022bfdabd53a4182265d097f558b989f3778e78a390ba21b7263a9c5
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 4KB
                                                                                                                                                                  • SHA256 ef6716a0a53587baf254c86d1af28a373cdf21920ee21b46b4a85fc9f403f8e1
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 781B
                                                                                                                                                                  • SHA256 745cddbcd27e61447d10368ef3366ea225387b6e147d9fb1643b27dece47d014
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 bfb833f3659e0ee67f4d22831e6ef0e39ea8303fb2e1039d93582787716404a7
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 4fb880d4d1ce9ec3607a166d71a63f673cbfb23235aeb709057b7b5c92ad7b1a
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 4KB
                                                                                                                                                                  • SHA256 899d65c828ae387cc31178e548fb8247c53f6ba0ccd612d037e72cacb39db7a8
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 b66f3bbc5a9c32a6af53d5255962e0f80724007abaf5cb05e59220feff67df88
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.0.1886871031~RFe5a224e.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.0.1886871031~RFe5a224e.TMP
                                                                                                                                                                  • Size 414B
                                                                                                                                                                  • SHA256 9afe9c6885bcc32b3b1e295bf31849e0dd0d1874a0100421e9fb5eb3b4baddce
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 472B
                                                                                                                                                                  • SHA256 159659aa3e37c35f38673f5fe0b1127e7919b42bf0d602175cbf56930a5ca898
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 839B
                                                                                                                                                                  • SHA256 c201c64675ddde49707038acf3cc033dfd397f43c8182f8ff3644dac28dfed71
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 565B
                                                                                                                                                                  • SHA256 3c8be193b185a8ea49749dd222ce1819cfaeb082f8f7f02d614d2bae482e7972
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 657B
                                                                                                                                                                  • SHA256 cf19a1d2ccf299959d07cd8ddf47906331f6141dd232b3d4b65920922e5631aa
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 750B
                                                                                                                                                                  • SHA256 98bbc4698a44ba3eab9d79b000b142b8d857f00c91290e34af85098d407e422c
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 5138d883aa930fcdf944de4e49b370025679c65d7b22e6243131addbdb7e5806
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 5f2f4d571efc52292f8de7493f532111cdaa3b4c65973b3b91d4330302dd67a6
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 e23651ca55b219fe23816f49da5b0b3cbeb0686d9f167db740200637d32010ba
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 df7a1d29f3399d5f4d79a9513c10cac01d73539bb11a5d84b137717f434755f8
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 6bbf6409b4ec71c5a0e69ea31e21233007e6282ed47bc1d6c61fd84a7f06d875
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 e2417468e2a301081856f704760fa78cbccc49e6441ad0288a645dd21ea1fada
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 224B
                                                                                                                                                                  • SHA256 fa79397d1b2ec2741126aac64571186c26c89c291604ba8045d5e82126f566da
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 933b6bddc551aabb85992bab421f3308297e1499897aac3998cdcd2aa8dd6602
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 931c7b3a963d43c29b0b5e05351cd54b497406dd7b8f5ca8bddfd66a12d62ab8
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 a4bf691b95daf038178358d53382bd7a55d00291f18084760f756e85fc52175a
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 932B
                                                                                                                                                                  • SHA256 313f9b887b8d13248ff41a07dba14585c19024463f32d7d7107c309d9d3e428c
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 14917495c7cd858eb03619ee18212d6dff3a99b431d3be7e8979cb23018b7f99
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 200B
                                                                                                                                                                  • SHA256 60ffc550e5533db3570aaf506d4e9caab114b347e68428f4f71b56e6435e7d5c
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 ed4ccb3430af19033698f3522720612a673a13d328a162c12cb28e55545a87aa
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 9185aef082a028e5f0bb98be3e10aef02e274f1bd9f2f6381bed2f5a5c67cb5e
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 e166dce80c69d3e6df22f642ff99103e4ef9f403c8172bf5eda14ad13561324d
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 e2be98cc34be43c830ad75640c2d5d64ecce06afb88702e6b656cec9aa5b1d8a
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 5b2a1ecc8674bdcb58f7602a9b6cc4720fa8fa8d8dce8bf0b001937762bf47d2
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 6351ab9a624683682f1c196eade56ea54bc39055beea4e78c668e1f477171ad4
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5796.1.1181537476~RFe5a2721.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5796.1.1181537476~RFe5a2721.TMP
                                                                                                                                                                  • Size 171B
                                                                                                                                                                  • SHA256 0b03548518d617127ffb649849b22523a1d30a2a86701b89e3829f5c8adfb126
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                  • Size 4KB
                                                                                                                                                                  • SHA256 35be1590fdbb2dd7de9e0cfa7b44617b1397eeb3ceb0a5f27db45840084dc8f7
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                  • Size 3KB
                                                                                                                                                                  • SHA256 110d77fe754418530c9f1444f941b0491d47716e2f40dda4f206c2ffbb1f0fce
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State~RFe5acf77.TMP
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State~RFe5acf77.TMP
                                                                                                                                                                  • Size 3KB
                                                                                                                                                                  • SHA256 b651a9931f7e3c5cf83da829e23ab34dc2d645be4b798f71aeaa3fb6dbd22699
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  0b440b2f-dc21-4f4d-b696-d2d56608167d.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\extensions_crx_cache\0b440b2f-dc21-4f4d-b696-d2d56608167d.tmp
                                                                                                                                                                  • Size 13B
                                                                                                                                                                  • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  index
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\speedtest\Code Cache\js\index
                                                                                                                                                                  • Size 24B
                                                                                                                                                                  • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  data_0
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\speedtest\GPUCache\data_0
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                  Submit Download

                                                                                                                                                                  data_1
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\speedtest\GPUCache\data_1
                                                                                                                                                                  • Size 264KB
                                                                                                                                                                  • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                  Submit Download

                                                                                                                                                                  data_2
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\speedtest\GPUCache\data_2
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                  Submit Download

                                                                                                                                                                  data_3
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\speedtest\GPUCache\data_3
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\speedtest\Local State
                                                                                                                                                                  • Size 434B
                                                                                                                                                                  • SHA256 853d097db022268f0f514aa4c5b0013a03771ff76a8e728ca4d179768fa4a77d
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Network Persistent State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\speedtest\Network\Network Persistent State
                                                                                                                                                                  • Size 59B
                                                                                                                                                                  • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Network Persistent State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\speedtest\Network\Network Persistent State
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 d448d6ebc01c6f0d9ae195ed896069cd890c475c73a6bc4e773c9086a57e8037
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Preferences
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\speedtest\Preferences
                                                                                                                                                                  • Size 57B
                                                                                                                                                                  • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Preferences
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\speedtest\Preferences
                                                                                                                                                                  • Size 122B
                                                                                                                                                                  • SHA256 3489a9fcea842f7bd4152b6ac5a20d493dfba1fdadaec75b503c8e5ffa0d9042
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  MANIFEST-000001
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\speedtest\Session Storage\MANIFEST-000001
                                                                                                                                                                  • Size 41B
                                                                                                                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Madium Executor_96266741.exe
                                                                                                                                                                  • Path C:\Users\Admin\Downloads\Madium Executor_96266741.exe
                                                                                                                                                                  • Size 583KB
                                                                                                                                                                  • SHA256 ddbd930cf742882ea6cc10ea5495f8aec24003664b81257c1b3900f3627b6684
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Madium Executor_96266741.exe:Zone.Identifier
                                                                                                                                                                  • Path C:\Users\Admin\Downloads\Madium Executor_96266741.exe:Zone.Identifier
                                                                                                                                                                  • Size 26B
                                                                                                                                                                  • SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  REG71A7.tmp
                                                                                                                                                                  • Path C:\Windows\SystemTemp\REG71A7.tmp
                                                                                                                                                                  • Size 3KB
                                                                                                                                                                  • SHA256 47b65baa2b611ca312c9197cae689740a7d60fe01a0e05bb2bc3997c70934fbf
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  memory/1748-5070-0x00007FF8D03A0000-0x00007FF8D0714000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/1748-5073-0x00007FF8BD850000-0x00007FF8BDD4A000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/1748-5075-0x00007FF8CF090000-0x00007FF8CF0D2000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/1748-5076-0x00007FF8CF2A0000-0x00007FF8CF307000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/1748-5069-0x00007FF8D0B30000-0x00007FF8D0BED000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/1748-5072-0x00007FF8D2020000-0x00007FF8D208F000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/1748-5074-0x00007FF8C92E0000-0x00007FF8C93EC000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/1748-5071-0x00007FF8D1870000-0x00007FF8D201E000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/2736-5081-0x0000000074CF0000-0x0000000074D15000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/2736-5084-0x00000000743C0000-0x0000000074410000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/2736-5078-0x0000000077410000-0x0000000077662000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/2736-5083-0x0000000075010000-0x0000000075495000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/2736-5082-0x0000000075B90000-0x0000000075BF4000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/2736-5080-0x0000000074410000-0x00000000744E5000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/2736-5079-0x00000000776E0000-0x0000000077CE2000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/3736-5027-0x0000000074410000-0x00000000744E5000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/3736-5022-0x0000000077410000-0x0000000077662000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/3736-5026-0x0000000075B90000-0x0000000075BF4000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/3736-5028-0x00000000743C0000-0x0000000074410000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/3736-5024-0x0000000075010000-0x0000000075495000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/3736-5025-0x0000000074CF0000-0x0000000074D15000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/3736-5023-0x00000000776E0000-0x0000000077CE2000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5472-5020-0x00007FF8D1870000-0x00007FF8D201E000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5472-5016-0x00007FF8D2020000-0x00007FF8D208F000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5472-5015-0x00007FF8D03A0000-0x00007FF8D0714000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5472-5019-0x00007FF8CF2A0000-0x00007FF8CF307000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5472-5017-0x00007FF8C92E0000-0x00007FF8C93EC000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5472-5014-0x00007FF8D0B30000-0x00007FF8D0BED000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5472-5018-0x00007FF8CF090000-0x00007FF8CF0D2000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5784-4958-0x00007FF8BD850000-0x00007FF8BDD4A000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5784-4957-0x00007FF8D03A0000-0x00007FF8D0714000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5784-4959-0x00007FF8C92E0000-0x00007FF8C93EC000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5784-4960-0x00007FF8D1870000-0x00007FF8D201E000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5784-4956-0x00007FF8D0B30000-0x00007FF8D0BED000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5796-4996-0x00007FF8D1870000-0x00007FF8D201E000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5796-4609-0x00007FF8D03A0000-0x00007FF8D0714000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5796-4611-0x00007FF8C92E0000-0x00007FF8C93EC000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5796-4612-0x00007FF8BD850000-0x00007FF8BDD4A000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5796-4610-0x00007FF8D1870000-0x00007FF8D201E000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5796-4608-0x00007FF8D0B30000-0x00007FF8D0BED000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5796-4995-0x00007FF8D03A0000-0x00007FF8D0714000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6132-5092-0x00000000743C0000-0x0000000074410000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6132-5086-0x0000000077410000-0x0000000077662000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6132-5087-0x00000000776E0000-0x0000000077CE2000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6132-5089-0x0000000075010000-0x0000000075495000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6132-5091-0x0000000074CF0000-0x0000000074D15000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6132-5090-0x0000000074410000-0x00000000744E5000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6132-5088-0x0000000075B90000-0x0000000075BF4000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6316-1443-0x00007FF8D10F0000-0x00007FF8D10F1000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6316-1442-0x00007FF8D0750000-0x00007FF8D0751000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6996-4206-0x00007FF8D1870000-0x00007FF8D201E000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6996-4196-0x00007FF8D2020000-0x00007FF8D208F000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6996-4193-0x00007FF8D0B30000-0x00007FF8D0BED000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6996-4194-0x00007FF8D03A0000-0x00007FF8D0714000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6996-4204-0x00007FF8C92E0000-0x00007FF8C93EC000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6996-4197-0x00007FF8BD850000-0x00007FF8BDD4A000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6996-4203-0x00007FF8CF2A0000-0x00007FF8CF307000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6996-4205-0x00007FF8CF090000-0x00007FF8CF0D2000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/7660-5094-0x00007FF8D03A0000-0x00007FF8D0714000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/7660-5093-0x00007FF8D0B30000-0x00007FF8D0BED000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/7660-5095-0x00007FF8D1870000-0x00007FF8D201E000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/7660-5099-0x00007FF8C92E0000-0x00007FF8C93EC000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/7660-5100-0x00007FF8CF090000-0x00007FF8CF0D2000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/7660-5096-0x00007FF8D2020000-0x00007FF8D208F000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6126-0x0000000005BA0000-0x0000000005BC2000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6154-0x0000000006F20000-0x0000000006F3E000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6127-0x0000000005D40000-0x0000000005DA6000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6128-0x00000000063E0000-0x0000000006446000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6124-0x0000000005690000-0x00000000056C6000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6135-0x0000000006450000-0x00000000067A7000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6136-0x0000000006930000-0x000000000694E000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6137-0x00000000069E0000-0x0000000006A2C000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6146-0x0000000007B00000-0x0000000007B34000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6125-0x0000000005DB0000-0x00000000063DA000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6147-0x000000006AA80000-0x000000006AACC000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6155-0x0000000007B40000-0x0000000007BE4000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6164-0x00000000082F0000-0x000000000896A000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6165-0x0000000007CA0000-0x0000000007CBA000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6166-0x0000000007F80000-0x0000000007F9C000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6167-0x0000000006F30000-0x0000000006F3A000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/8996-6168-0x0000000008010000-0x0000000008036000-memory.dmp
                                                                                                                                                                  Download