Overview

overview

8

Static

static

1

sample.html

windows10-2004-x64

8

sample.html

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    634s
  • max time network
    623s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    23/07/2026, 17:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    sample.html
  • Size 56KB
  • Sample260723-v14a9stdqc
  • SHA256 97457b2e5c2d1454ac2ccc77e6ea1526f385a3d477a3863ef648c997e499c477
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoveryexecutionpersistenceprivilege_escalationspywarestealertrojanupx

Malware Config

Signatures

  • Downloads MZ/PE file 4 IoCs
  • Checks computer location settings 2 TTPs 16 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops desktop.ini file(s) 1 IoCs
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Service Discovery 1 TTPs 1 IoCs

    Attempt to gather information on host's network.

    discovery
  • Drops file in System32 directory 16 IoCs
  • Probable phishing domain 1 TTPs 1 IoCs
  • UPX packed file 15 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 5 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • System Location Discovery: System Language Discovery 1 TTPs 15 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 10 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 16 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 4 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious behavior: LoadsDriver 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 30 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Checks SCSI registry key(s)
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4256
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff80d50c728,0x7ff80d50c734,0x7ff80d50c740
      2⤵
        PID:4156
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,7091755682514958230,85158835111886245,262144 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1988 /prefetch:2
        2⤵
          PID:3980
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1568,i,8940453987956161443,6413502371266380367,524288 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2132 /prefetch:3
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:2388
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,11901390458439588189,1153989011007008086,524288 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2476 /prefetch:8
          2⤵
            PID:3756
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,17310760534302585453,6840856676257463424,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3244 /prefetch:1
            2⤵
              PID:972
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3240,i,11380179431622433904,12241346423045899029,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:1
              2⤵
                PID:4124
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4396,i,12701829432959201873,17341252693360343282,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4436 /prefetch:2
                2⤵
                  PID:3428
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5720,i,9927882481402863901,17781580696713007773,524288 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5732 /prefetch:8
                  2⤵
                    PID:2524
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5768,i,3355972624629885291,2769498120012342114,524288 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5756 /prefetch:8
                    2⤵
                      PID:1280
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5772,i,17979621950542742992,18422401599151648855,524288 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5740 /prefetch:8
                      2⤵
                        PID:628
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5764,i,11750483344910847248,14977367090061515003,524288 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5720 /prefetch:8
                        2⤵
                          PID:4624
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4448,i,15037028648788185832,3934732562768064047,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4508 /prefetch:1
                          2⤵
                            PID:4232
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3500,i,13116669017023040636,9553992026216097573,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5616 /prefetch:1
                            2⤵
                              PID:432
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3384,i,13561487065415100311,10467679415749832448,524288 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3424 /prefetch:8
                              2⤵
                                PID:1360
                              • C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe
                                "C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe"
                                2⤵
                                • Checks computer location settings
                                • Executes dropped EXE
                                • System Location Discovery: System Language Discovery
                                • Suspicious use of SetWindowsHookEx
                                • Suspicious use of WriteProcessMemory
                                PID:1444
                                • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                  "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:3969818 "__IRAFN:C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe" "__IRCT:3" "__IRTSS:26673860" "__IRSID:S-1-5-21-1074038928-2032447174-945360078-1000"
                                  3⤵
                                  • Checks computer location settings
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • System Location Discovery: System Language Discovery
                                  • Suspicious use of SetWindowsHookEx
                                  • Suspicious use of WriteProcessMemory
                                  PID:3112
                                  • C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
                                    "C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
                                    4⤵
                                    • Checks computer location settings
                                    • Executes dropped EXE
                                    • System Location Discovery: System Language Discovery
                                    • Suspicious use of SetWindowsHookEx
                                    • Suspicious use of WriteProcessMemory
                                    PID:2828
                                    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:3839250 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:3869932" "__IRSID:S-1-5-21-1074038928-2032447174-945360078-1000"
                                      5⤵
                                      • Downloads MZ/PE file
                                      • Checks computer location settings
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • System Location Discovery: System Language Discovery
                                      • Suspicious behavior: EnumeratesProcesses
                                      • Suspicious use of SetWindowsHookEx
                                      • Suspicious use of WriteProcessMemory
                                      PID:1712
                                      • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                                        "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=0
                                        6⤵
                                        • Executes dropped EXE
                                        • System Location Discovery: System Language Discovery
                                        • Suspicious use of SetWindowsHookEx
                                        • Suspicious use of WriteProcessMemory
                                        PID:744
                                        • C:\Users\Admin\AppData\Local\Temp\7zS8E2E4E5A\installer.exe
                                          C:\Users\Admin\AppData\Local\Temp\7zS8E2E4E5A\installer.exe --silent --allusers=0 --server-tracking-blob=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
                                          7⤵
                                          • Downloads MZ/PE file
                                          • Executes dropped EXE
                                          • Enumerates connected drives
                                          • Enumerates system info in registry
                                          • Modifies system certificate store
                                          • Suspicious use of SetWindowsHookEx
                                          • Suspicious use of WriteProcessMemory
                                          PID:1588
                                          • C:\Users\Admin\AppData\Local\Temp\7zS8E2E4E5A\installer.exe
                                            C:\Users\Admin\AppData\Local\Temp\7zS8E2E4E5A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ff69d60cd88,0x7ff69d60cd94,0x7ff69d60cda0
                                            8⤵
                                            • Executes dropped EXE
                                            • Suspicious use of SetWindowsHookEx
                                            PID:4484
                                          • C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\installer.exe
                                            "C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\installer.exe" --version
                                            8⤵
                                            • Executes dropped EXE
                                            • Suspicious use of SetWindowsHookEx
                                            PID:3128
                                          • C:\Users\Admin\AppData\Local\Temp\7zS8E2E4E5A\installer.exe
                                            "C:\Users\Admin\AppData\Local\Temp\7zS8E2E4E5A\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=1588 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_20260723183035" --session-guid=f277d98c-86da-41b7-952f-2d7357880c7c --server-tracking-blob="NDdlZWVjOGQ5NDliYWE2ZWViMDkxNzg4Mjg5ZWRmNWMwYTkxZjQ3ZWUxMTM3M2E2NDI4MTU4YjVmMDQwNWRmYTp7ImNvdW50cnkiOiJHQiIsImVkaXRpb24iOiJzdGQtMiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhX2d4In0sInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yLz91dG1fc291cmNlPU1TVEwmdXRtX21lZGl1bT1wYiZ1dG1fY2FtcGFpZ249T3BlcmFHWCIsInN5c3RlbSI6eyJwbGF0Zm9ybSI6eyJhcmNoIjoieDg2XzY0Iiwib3BzeXMiOiJXaW5kb3dzIiwib3BzeXMtdmVyc2lvbiI6IjEwIiwicGFja2FnZSI6IkVYRSJ9fSwidGltZXN0YW1wIjoiMTc4NDgyNzgzMy4xODk4IiwidXNlcmFnZW50IjoiU2V0dXAgRmFjdG9yeSA4LjAiLCJ1dG0iOnsiY2FtcGFpZ24iOiJPcGVyYUdYIiwibWVkaXVtIjoicGIiLCJzb3VyY2UiOiJNU1RMIn0sInV1aWQiOiI0MzA4NDcyNS1lZDRjLTRjM2ItYTUwZC01ZTA2ZGM2Njk5MmQifQ== " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=8807000000000000
                                            8⤵
                                            • Executes dropped EXE
                                            • Enumerates connected drives
                                            • Suspicious use of SetWindowsHookEx
                                            • Suspicious use of WriteProcessMemory
                                            PID:1008
                                            • C:\Users\Admin\AppData\Local\Temp\7zS8E2E4E5A\installer.exe
                                              C:\Users\Admin\AppData\Local\Temp\7zS8E2E4E5A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x28c,0x290,0x294,0x25c,0x298,0x7ff69d60cd88,0x7ff69d60cd94,0x7ff69d60cda0
                                              9⤵
                                              • Executes dropped EXE
                                              • Suspicious use of SetWindowsHookEx
                                              PID:4748
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\installer.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\installer.exe" --backend --initial-pid=1588 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351" --session-guid=f277d98c-86da-41b7-952f-2d7357880c7c --server-tracking-blob="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 " --silent --desktopshortcut=1 --install-subfolder=133.0.5932.56
                                              9⤵
                                              • Executes dropped EXE
                                              • Enumerates connected drives
                                              • Enumerates system info in registry
                                              • Modifies registry class
                                              • Suspicious use of FindShellTrayWindow
                                              • Suspicious use of SendNotifyMessage
                                              • Suspicious use of SetWindowsHookEx
                                              • Suspicious use of WriteProcessMemory
                                              PID:5532
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\installer.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x290,0x294,0x298,0x264,0x29c,0x7ff6e53bcd88,0x7ff6e53bcd94,0x7ff6e53bcda0
                                                10⤵
                                                • Executes dropped EXE
                                                • Suspicious use of SetWindowsHookEx
                                                PID:5704
                                              • C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\assistant\assistant_installer.exe
                                                "C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                                                10⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • Adds Run key to start application
                                                • System Location Discovery: System Language Discovery
                                                • Enumerates system info in registry
                                                • Modifies Internet Explorer settings
                                                • Suspicious use of WriteProcessMemory
                                                PID:6060
                                                • C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\assistant\assistant_installer.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0xa94b80,0xa94b8c,0xa94b98
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  PID:2256
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  • Enumerates system info in registry
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:2312
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x6e4b80,0x6e4b8c,0x6e4b98
                                                    12⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • System Location Discovery: System Language Discovery
                                                    PID:3236
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                                                    12⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • System Location Discovery: System Language Discovery
                                                    • Enumerates system info in registry
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:2852
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                      13⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Enumerates system info in registry
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:3336
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_crashreporter.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x190,0x194,0x18c,0x15c,0x19c,0x7fffe74d15a0,0x7fffe74d15b0,0x7fffe74d15c0
                                                        14⤵
                                                        • Executes dropped EXE
                                                        PID:2704
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                      13⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:6444
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_crashreporter.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x190,0x194,0x18c,0x15c,0x188,0x7fffe74d15a0,0x7fffe74d15b0,0x7fffe74d15c0
                                                        14⤵
                                                        • Executes dropped EXE
                                                        PID:6308
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x27c,0x280,0x284,0x238,0x288,0x1278378,0x1278384,0x1278390
                                                      13⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • System Location Discovery: System Language Discovery
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:6380
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                        14⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • Enumerates system info in registry
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:6416
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_crashreporter.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x190,0x194,0x18c,0x15c,0x188,0x7fffe74d15a0,0x7fffe74d15b0,0x7fffe74d15c0
                                                          15⤵
                                                          • Executes dropped EXE
                                                          PID:6524
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                        14⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • Enumerates system info in registry
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:6648
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_crashreporter.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x1a4,0x1a8,0x1ac,0x1a0,0x1b0,0x7fffe74d15a0,0x7fffe74d15b0,0x7fffe74d15c0
                                                          15⤵
                                                          • Executes dropped EXE
                                                          PID:6680
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                        14⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • Enumerates system info in registry
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:6896
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_crashreporter.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x190,0x194,0x18c,0x15c,0x188,0x7fffe74d15a0,0x7fffe74d15b0,0x7fffe74d15c0
                                                          15⤵
                                                          • Executes dropped EXE
                                                          PID:6860
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                                                10⤵
                                                • Checks computer location settings
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • Adds Run key to start application
                                                • Checks processor information in registry
                                                • Enumerates system info in registry
                                                • Suspicious behavior: EnumeratesProcesses
                                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                • Suspicious use of FindShellTrayWindow
                                                • Suspicious use of SendNotifyMessage
                                                • Suspicious use of WriteProcessMemory
                                                PID:6012
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_crashreporter.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x1c0,0x1c4,0x1c8,0x1bc,0x140,0x7fffe74d15a0,0x7fffe74d15b0,0x7fffe74d15c0
                                                  11⤵
                                                  • Executes dropped EXE
                                                  PID:6172
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,1265264658063336495,9510846485465145123,262144 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1884 /prefetch:2
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Enumerates system info in registry
                                                  PID:6952
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2136,i,4775153065668384275,10073517755237726116,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2144 /prefetch:3
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Time Discovery
                                                  • Enumerates system info in registry
                                                  PID:7044
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2284,i,14553681657165635429,5223813365079363754,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2292 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Enumerates system info in registry
                                                  PID:7088
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3108,i,4689514817367051577,16310187302609194554,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3220 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  PID:3508
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3144,i,9117638169481161316,10537166497657051924,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3240 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Enumerates system info in registry
                                                  PID:2716
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3164,i,8957584336670822131,7877769454802893458,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3260 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Enumerates system info in registry
                                                  PID:5148
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3172,i,8526502990990694726,6238749232020824027,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3272 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Enumerates system info in registry
                                                  PID:5164
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3176,i,5467388485271545087,8238652522191473756,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3300 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Enumerates system info in registry
                                                  PID:5176
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3200,i,5006651894897067167,6542173901309026110,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3320 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Enumerates system info in registry
                                                  PID:5188
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4220,i,14909851504182248589,50026767347787622,2097152 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4224 /prefetch:1
                                                  11⤵
                                                  • Checks computer location settings
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  PID:5216
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_gx_splash.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                                                  11⤵
                                                  • Executes dropped EXE
                                                  PID:5612
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4616,i,14978482051153219883,11546380752378265962,2097152 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4632 /prefetch:1
                                                  11⤵
                                                  • Checks computer location settings
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Enumerates system info in registry
                                                  PID:2000
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4796,i,3881166712043871831,11588149704072594733,2097152 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4804 /prefetch:2
                                                  11⤵
                                                  • Checks computer location settings
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Enumerates system info in registry
                                                  PID:1468
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4972,i,14160033268479085295,4971979790880435294,2097152 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4956 /prefetch:1
                                                  11⤵
                                                  • Checks computer location settings
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  PID:3568
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5168,i,1041345138344091896,9453959677113591861,2097152 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5188 /prefetch:1
                                                  11⤵
                                                  • Checks computer location settings
                                                  • Executes dropped EXE
                                                  • Enumerates system info in registry
                                                  PID:6260
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5316,i,1236407449909185174,2439395474081883169,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5228 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Enumerates system info in registry
                                                  PID:4112
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5312,i,10002048893860355887,11825220981641508450,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5408 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  PID:6636
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5320,i,3785903919212012638,14212766343365978422,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5440 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Enumerates system info in registry
                                                  PID:6616
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5324,i,15386963513684905753,137235300626745043,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5472 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  PID:6976
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6228,i,12194899515229757953,8619296176010815535,2097152 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6232 /prefetch:2
                                                  11⤵
                                                  • Checks computer location settings
                                                  • Executes dropped EXE
                                                  • Enumerates system info in registry
                                                  PID:7208
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6552,i,13485051380299987674,17771708862160931946,2097152 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6580 /prefetch:2
                                                  11⤵
                                                  • Checks computer location settings
                                                  • Executes dropped EXE
                                                  PID:7316
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6800,i,12453994508087871678,1827560211078343421,2097152 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6852 /prefetch:2
                                                  11⤵
                                                  • Checks computer location settings
                                                  • Enumerates system info in registry
                                                  PID:7356
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6568,i,9537677062315889643,12004329698094578178,2097152 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6500 /prefetch:1
                                                  11⤵
                                                  • Checks computer location settings
                                                  • Executes dropped EXE
                                                  • Enumerates system info in registry
                                                  PID:7760
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7080,i,11379111644024854212,10151113877327411980,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6256 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Enumerates system info in registry
                                                  PID:7916
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7352,i,1470573482734453902,11531261359355323667,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7240 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  PID:5548
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7332,i,5231608578838713686,11556826046445119489,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7376 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Enumerates system info in registry
                                                  PID:5836
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7348,i,14302825653607361708,13545257083032479297,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7396 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  PID:3116
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7340,i,5280802547045148593,3083941950702281241,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7416 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Enumerates system info in registry
                                                  PID:1320
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7424,i,13476967585125654751,16543564325438417480,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7912 /prefetch:8
                                                  11⤵
                                                  • Enumerates system info in registry
                                                  PID:5180
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7904,i,3479666387299805236,675953839420466963,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7932 /prefetch:8
                                                  11⤵
                                                  • Executes dropped EXE
                                                  • Enumerates system info in registry
                                                  PID:5136
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8200,i,2128119826154950928,12654248021320222531,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8212 /prefetch:8
                                                  11⤵
                                                  • Enumerates system info in registry
                                                  PID:5664
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8336,i,2573905072721172129,13437347388505500674,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8376 /prefetch:8
                                                  11⤵
                                                  • Enumerates system info in registry
                                                  PID:4720
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8180,i,7424446167073474893,863372366718496582,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8504 /prefetch:8
                                                  11⤵
                                                    PID:6588
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8684,i,15490051381244477863,9710136867237586523,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8676 /prefetch:8
                                                    11⤵
                                                    • Enumerates system info in registry
                                                    PID:5224
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8704,i,16083011849640381582,10709102801339626801,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8716 /prefetch:8
                                                    11⤵
                                                    • Enumerates system info in registry
                                                    PID:3004
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8528,i,9631022696138787487,11199933726484086403,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8536 /prefetch:8
                                                    11⤵
                                                    • Enumerates system info in registry
                                                    PID:6608
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9344,i,8540288962528944844,4623837866343007811,2097152 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9356 /prefetch:2
                                                    11⤵
                                                    • Checks computer location settings
                                                    PID:8636
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9324,i,14386662492623766944,10867956126566919163,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9532 /prefetch:8
                                                    11⤵
                                                    • Enumerates system info in registry
                                                    PID:8648
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                                                    11⤵
                                                    • Enumerates system info in registry
                                                    PID:5252
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x294,0x298,0x29c,0x274,0x2a0,0x7ff671ab9860,0x7ff671ab986c,0x7ff671ab9878
                                                      12⤵
                                                        PID:8416
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9376,i,13548166783343237311,17408392411889183757,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9256 /prefetch:8
                                                      11⤵
                                                        PID:6828
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10060,i,16421718725188339054,9833125528902937482,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10068 /prefetch:8
                                                        11⤵
                                                        • Enumerates system info in registry
                                                        PID:5240
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10244,i,5227873694214584774,15813328596685340855,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10252 /prefetch:8
                                                        11⤵
                                                        • Enumerates system info in registry
                                                        PID:6492
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=10408,i,6037645580388167927,5729527501703641910,2097152 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10452 /prefetch:1
                                                        11⤵
                                                          PID:7476
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\installer.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\installer.exe" --fix-taskbar-pins
                                                          11⤵
                                                          • Enumerates system info in registry
                                                          PID:6768
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\installer.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ff6e53bcd88,0x7ff6e53bcd94,0x7ff6e53bcda0
                                                            12⤵
                                                              PID:8456
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3420,i,14907696794195231747,14737725207431373028,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=3416 /prefetch:8
                                                            11⤵
                                                            • Enumerates system info in registry
                                                            PID:8044
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3404,i,1760897582231218157,14302350144983495140,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=3360 /prefetch:8
                                                            11⤵
                                                              PID:6912
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10,GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3388,i,9849191232448047754,15418094779582201401,524288 --field-trial-handle=1892,i,14903241781301335421,2069284084465340370,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,544982457662183075,645709373519756743,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10696 /prefetch:8
                                                              11⤵
                                                                PID:8232
                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"
                                                          8⤵
                                                          • Executes dropped EXE
                                                          • System Location Discovery: System Language Discovery
                                                          • Suspicious use of SetWindowsHookEx
                                                          PID:1092
                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\assistant\assistant_installer.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\assistant\assistant_installer.exe" --version
                                                          8⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • System Location Discovery: System Language Discovery
                                                          • Suspicious use of SetWindowsHookEx
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:5572
                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\assistant\assistant_installer.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x240,0x244,0x248,0x23c,0x24c,0xa94b80,0xa94b8c,0xa94b98
                                                            9⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious use of SetWindowsHookEx
                                                            PID:5712
                                                • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                                                  "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
                                                  4⤵
                                                  • Executes dropped EXE
                                                  • System Location Discovery: System Language Discovery
                                                  • Suspicious use of SetWindowsHookEx
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:5936
                                                  • C:\Program Files\Java\jre-1.8\bin\javaw.exe
                                                    "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
                                                    5⤵
                                                    • Suspicious use of SetWindowsHookEx
                                                    PID:5976
                                                    • C:\Program Files\Java\jre-1.8\bin\javaw.exe
                                                      "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Dfile.encoding=windows-1252 -jar C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                                                      6⤵
                                                      • Modifies registry class
                                                      PID:7292
                                                      • C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
                                                        C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe -Dsun.java2d.uiScale.enabled=false -Xmx1536m -Dfile.encoding=UTF8 -Djava.net.preferIPv4Stack=true --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.time=ALL-UNNAMED --add-opens=java.desktop/java.awt=ALL-UNNAMED --add-opens=java.desktop/sun.awt.image=ALL-UNNAMED --add-opens=java.desktop/sun.java2d=ALL-UNNAMED --add-opens=java.desktop/java.awt.color=ALL-UNNAMED --add-opens=java.desktop/java.awt.image=ALL-UNNAMED --add-opens=java.desktop/com.apple.eawt=ALL-UNNAMED --add-opens=java.base/java.util.regex=ALL-UNNAMED --add-opens=java.desktop/javax.swing=ALL-UNNAMED --add-opens=java.desktop/java.beans=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.network=ALL-UNNAMED --add-opens=javafx.web/javafx.scene.web=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.event=ALL-UNNAMED -cp C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\annotations-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aopalliance-1.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\arns-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-query-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-xml-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checker-qual-3.12.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-compress-1.23.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-io-2.11.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-lang3-3.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-1.1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-api-1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-vfs2-2.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\crt-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\desktop-common-util-1.268.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\DiscordIPC-0.5.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\dnsjava-2.1.8.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\endpoints-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\error_prone_annotations-2.18.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\eventstream-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\failureaccess-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\filters-2.0.235.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\gson-2.13.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guava-31.0.1-jre.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-assistedinject-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-eventstream-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-client-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-download-1.268.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-fluent-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-h2-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\identity-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\j2objc-annotations-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jackson-annotations-2.13.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jakarta.inject-api-2.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\java-image-scaling-0.8.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javax.annotation-api-1.3.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-api-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-core-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-impl-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jcl-over-slf4j-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-20230227.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jsr305-3.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-native-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junrar-0.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\log4j-1.2.17.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-classic-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-core-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\lombok-1.18.30.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-api-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svn-commons-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svnexe-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\metrics-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\MinecraftServerPing-1.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\mockserver-netty-no-dependencies-5.14.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\modpack-dto-2.282.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\picture-bundle-3.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\plexus-utils-1.5.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\profiles-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\protocol-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\reactive-streams-1.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regexp-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regions-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\s3-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\sdk-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\skin-api-1.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\slf4j-api-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\statistics-dto-1.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\third-party-jackson-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\tlauncher-resource-1.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-lite-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\xz-1.9.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\original-TLauncher-2.9371.jar; org.tlauncher.tlauncher.rmo.TLauncher -starterConfig=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\starter.json -requireUpdate=false -currentAppVersion=2.9371 -starterDomainAvailabilityV1=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\domainAvailability.json -country=${country} "-starterJVM=C:\Program Files\Java\jre-1.8\bin\javaw.exe" -starterWorkingDirectory=C:\Users\Admin\Downloads -starterJarFile=C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe -starterFileEncoding=windows-1252 -runVersionWithServer=empty
                                                        7⤵
                                                        • Checks computer location settings
                                                        • System Network Configuration Discovery: Internet Connection Discovery
                                                        • System Time Discovery
                                                        • Checks processor information in registry
                                                        PID:4792
                                                        • C:\Windows\SYSTEM32\cmd.exe
                                                          cmd.exe /C "chcp 437 & wmic CPU get NAME"
                                                          8⤵
                                                          • Executes a command shell one-liner
                                                          PID:8448
                                                          • C:\Windows\system32\chcp.com
                                                            chcp 437
                                                            9⤵
                                                              PID:5480
                                                            • C:\Windows\System32\Wbem\WMIC.exe
                                                              wmic CPU get NAME
                                                              9⤵
                                                                PID:8864
                                                            • C:\Windows\SYSTEM32\cmd.exe
                                                              cmd.exe /C "chcp 437 & cmd.exe /c set processor"
                                                              8⤵
                                                              • Executes a command shell one-liner
                                                              PID:9020
                                                              • C:\Windows\system32\chcp.com
                                                                chcp 437
                                                                9⤵
                                                                  PID:4132
                                                                • C:\Windows\system32\cmd.exe
                                                                  cmd.exe /c set processor
                                                                  9⤵
                                                                  • Executes a command shell one-liner
                                                                  PID:2348
                                                              • C:\Windows\SYSTEM32\cmd.exe
                                                                cmd.exe /C "chcp 437 & dxdiag /whql:off /t C:\Users\Admin\AppData\Roaming\.tlauncher\logs\tlauncher\dxdiag.txt"
                                                                8⤵
                                                                • Executes a command shell one-liner
                                                                PID:6112
                                                                • C:\Windows\system32\chcp.com
                                                                  chcp 437
                                                                  9⤵
                                                                    PID:3656
                                                                  • C:\Windows\system32\dxdiag.exe
                                                                    dxdiag /whql:off /t C:\Users\Admin\AppData\Roaming\.tlauncher\logs\tlauncher\dxdiag.txt
                                                                    9⤵
                                                                    • Drops file in System32 directory
                                                                    • Checks SCSI registry key(s)
                                                                    • Modifies registry class
                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                    PID:5192
                                                                • C:\Windows\SYSTEM32\cmd.exe
                                                                  cmd.exe /C "chcp 437 & wmic qfe get HotFixID"
                                                                  8⤵
                                                                  • Executes a command shell one-liner
                                                                  PID:3472
                                                                  • C:\Windows\system32\chcp.com
                                                                    chcp 437
                                                                    9⤵
                                                                      PID:6760
                                                                    • C:\Windows\System32\Wbem\WMIC.exe
                                                                      wmic qfe get HotFixID
                                                                      9⤵
                                                                        PID:4624
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4840,i,6605519291184411399,11984642531508714924,262144 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4848 /prefetch:8
                                                          2⤵
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          PID:4428
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5068,i,11061990094994740775,1441407327697422471,524288 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6104 /prefetch:8
                                                          2⤵
                                                            PID:4040
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6108,i,914800288823690266,4852007119819987603,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4948 /prefetch:1
                                                            2⤵
                                                              PID:7616
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5052,i,14777837308599773928,1757768776199971312,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6180 /prefetch:1
                                                              2⤵
                                                                PID:7536
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6328,i,8925761665435196902,1876803385147202474,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6308 /prefetch:1
                                                                2⤵
                                                                  PID:5696
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3480,i,3625347838800209264,4352786445631382404,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6492 /prefetch:1
                                                                  2⤵
                                                                    PID:8720
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6612,i,3997167548491575965,16696949480889391227,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6604 /prefetch:1
                                                                    2⤵
                                                                      PID:3672
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6752,i,10906632352211190892,976904674402380854,524288 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3428 /prefetch:8
                                                                      2⤵
                                                                      • Modifies registry class
                                                                      PID:8100
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6784,i,3683252321960053162,4949773593235815231,524288 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6084 /prefetch:8
                                                                      2⤵
                                                                        PID:6544
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3248,i,9663169470014290881,16898010675723849032,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6164 /prefetch:1
                                                                        2⤵
                                                                          PID:8140
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6844,i,6819858415091993629,7290823492220636572,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4924 /prefetch:1
                                                                          2⤵
                                                                            PID:5608
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=3396,i,4336686194213450555,6837697368290016548,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4840 /prefetch:1
                                                                            2⤵
                                                                              PID:5236
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6772,i,1535039992841199712,1512446873110769008,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6620 /prefetch:1
                                                                              2⤵
                                                                                PID:7736
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6680,i,195568764784514309,12489920884533345446,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6812 /prefetch:1
                                                                                2⤵
                                                                                  PID:8768
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=7040,i,950568080239928020,16221679161766946406,524288 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7016 /prefetch:8
                                                                                  2⤵
                                                                                    PID:8852
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7092,i,5040034527662204865,13127924406544886129,524288 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6972 /prefetch:8
                                                                                    2⤵
                                                                                      PID:7484
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=3104,i,16292961793066160191,11833265808896783507,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7220 /prefetch:1
                                                                                      2⤵
                                                                                        PID:452
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7260,i,8611596411365019017,12822884435807967504,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4840 /prefetch:1
                                                                                        2⤵
                                                                                          PID:9008
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7396,i,3665928201833947294,12460210494659723138,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7392 /prefetch:1
                                                                                          2⤵
                                                                                            PID:4140
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6932,i,1469917970373347979,18393395964974452534,2097152 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6716 /prefetch:1
                                                                                            2⤵
                                                                                              PID:8440
                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=8152,i,18152294046950420063,515319654383247981,524288 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8096 /prefetch:8
                                                                                              2⤵
                                                                                              • Modifies registry class
                                                                                              PID:7024
                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=8036,i,14598777157752802915,5296743661379746286,524288 --field-trial-handle=1992,i,5870688093416027900,3391713479291053512,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7704 /prefetch:8
                                                                                              2⤵
                                                                                              • Modifies registry class
                                                                                              PID:7240
                                                                                          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                            1⤵
                                                                                              PID:2240
                                                                                            • C:\Windows\system32\svchost.exe
                                                                                              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                              1⤵
                                                                                                PID:4672
                                                                                              • C:\Windows\System32\GameBarPresenceWriter.exe
                                                                                                "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                                                                                                1⤵
                                                                                                • Network Service Discovery
                                                                                                PID:6432
                                                                                              • C:\Windows\system32\OpenWith.exe
                                                                                                C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                1⤵
                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                PID:6588
                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                1⤵
                                                                                                • Drops desktop.ini file(s)
                                                                                                • Checks processor information in registry
                                                                                                PID:6768
                                                                                              • C:\Windows\system32\OpenWith.exe
                                                                                                C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                1⤵
                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                PID:4864
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                                                                1⤵
                                                                                                • Executes dropped EXE
                                                                                                • Loads dropped DLL
                                                                                                PID:5860
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_crashreporter.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x174,0x178,0x170,0x140,0x16c,0x7fffe74d15a0,0x7fffe74d15b0,0x7fffe74d15c0
                                                                                                  2⤵
                                                                                                  • Executes dropped EXE
                                                                                                  PID:5500
                                                                                              • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                1⤵
                                                                                                  PID:5168
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                                                                  1⤵
                                                                                                    PID:5620
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff671ab9860,0x7ff671ab986c,0x7ff671ab9878
                                                                                                      2⤵
                                                                                                        PID:8928
                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                      1⤵
                                                                                                      • Checks processor information in registry
                                                                                                      • Modifies registry class
                                                                                                      PID:6652
                                                                                                    • C:\Windows\system32\OpenWith.exe
                                                                                                      C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                      1⤵
                                                                                                        PID:5172
                                                                                                      • C:\Windows\System32\svchost.exe
                                                                                                        C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
                                                                                                        1⤵
                                                                                                        • Checks processor information in registry
                                                                                                        • Modifies data under HKEY_USERS
                                                                                                        PID:532
                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                        C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                        1⤵
                                                                                                        • Checks processor information in registry
                                                                                                        PID:7780
                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                        C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                        1⤵
                                                                                                        • Checks processor information in registry
                                                                                                        PID:7748

                                                                                                      Network

                                                                                                            MITRE ATT&CK Enterprise v16

                                                                                                            Reconnaissance

                                                                                                            Resource Development

                                                                                                            Initial Access

                                                                                                            Phishing

                                                                                                            1
                                                                                                            T1566

                                                                                                            Execution

                                                                                                            Command and Scripting Interpreter

                                                                                                            1
                                                                                                            T1059

                                                                                                            Windows Command Shell

                                                                                                            1
                                                                                                            T1059.003

                                                                                                            Persistence

                                                                                                            Boot or Logon Autostart Execution

                                                                                                            1
                                                                                                            T1547

                                                                                                            Registry Run Keys / Startup Folder

                                                                                                            1
                                                                                                            T1547.001

                                                                                                            Event Triggered Execution

                                                                                                            1
                                                                                                            T1546

                                                                                                            Component Object Model Hijacking

                                                                                                            1
                                                                                                            T1546.015

                                                                                                            Privilege Escalation

                                                                                                            Boot or Logon Autostart Execution

                                                                                                            1
                                                                                                            T1547

                                                                                                            Registry Run Keys / Startup Folder

                                                                                                            1
                                                                                                            T1547.001

                                                                                                            Event Triggered Execution

                                                                                                            1
                                                                                                            T1546

                                                                                                            Component Object Model Hijacking

                                                                                                            1
                                                                                                            T1546.015

                                                                                                            Defense Evasion

                                                                                                            Modify Registry

                                                                                                            3
                                                                                                            T1112

                                                                                                            Subvert Trust Controls

                                                                                                            1
                                                                                                            T1553

                                                                                                            Install Root Certificate

                                                                                                            1
                                                                                                            T1553.004

                                                                                                            Credential Access

                                                                                                            Credentials from Password Stores

                                                                                                            1
                                                                                                            T1555

                                                                                                            Credentials from Web Browsers

                                                                                                            1
                                                                                                            T1555.003

                                                                                                            Unsecured Credentials

                                                                                                            1
                                                                                                            T1552

                                                                                                            Credentials In Files

                                                                                                            1
                                                                                                            T1552.001

                                                                                                            Discovery

                                                                                                            Browser Information Discovery

                                                                                                            1
                                                                                                            T1217

                                                                                                            Network Service Discovery

                                                                                                            1
                                                                                                            T1046

                                                                                                            Peripheral Device Discovery

                                                                                                            2
                                                                                                            T1120

                                                                                                            Query Registry

                                                                                                            7
                                                                                                            T1012

                                                                                                            System Information Discovery

                                                                                                            6
                                                                                                            T1082

                                                                                                            System Location Discovery

                                                                                                            1
                                                                                                            T1614

                                                                                                            System Language Discovery

                                                                                                            1
                                                                                                            T1614.001

                                                                                                            System Network Configuration Discovery

                                                                                                            1
                                                                                                            T1016

                                                                                                            Internet Connection Discovery

                                                                                                            1
                                                                                                            T1016.001

                                                                                                            System Time Discovery

                                                                                                            1
                                                                                                            T1124

                                                                                                            Lateral Movement

                                                                                                            Collection

                                                                                                            Data from Local System

                                                                                                            1
                                                                                                            T1005

                                                                                                            Command and Control

                                                                                                            Exfiltration

                                                                                                            Impact

                                                                                                            Replay Monitor

                                                                                                            Loading Replay Monitor...

                                                                                                            Downloads

                                                                                                            E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                            • Size 471B
                                                                                                            • SHA256 b245a0454f06f9ca1d9f264a3d1c4f00a1463a0f9c3b82aff202aefefea894d2
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                            • Size 416B
                                                                                                            • SHA256 01baeec36436d55601510527e3a7fd4fc573f0ea778785aaa75ca81589b6b760
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            BrowsingTopicsState
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                            • Size 414B
                                                                                                            • SHA256 b8d1e4ad7d5e8861ebf020a4c62da8a32a4b0c7ba4d5e067d317938b2dd003aa
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            f_000008
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
                                                                                                            • Size 38KB
                                                                                                            • SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            f_00000a
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
                                                                                                            • Size 82KB
                                                                                                            • SHA256 33b18bd9890aa292639a21b718f476107646d533da26494506f77118e2bf72bb
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            f_00000c
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
                                                                                                            • Size 436KB
                                                                                                            • SHA256 0b320d2cf00e9215763a5377904e2301b2edb7a5d299bd319259714cf8bcd9a9
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            f_000032
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032
                                                                                                            • Size 373KB
                                                                                                            • SHA256 00dcd72487112e44ba2487e5eb363a98d65f14344edef5293c8e9dd52850ee58
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            f_000038
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000038
                                                                                                            • Size 51KB
                                                                                                            • SHA256 96996053bc63e991e210361ee491cbced9c27afe9b3db06c5cb95af1c435496c
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            f_000057
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000057
                                                                                                            • Size 23KB
                                                                                                            • SHA256 43eb1cc7385cdfd1c1ddcdb00ec2756893e560dae367d1cad1b8d8ce238ec851
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            temp-index
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                            • Size 8KB
                                                                                                            • SHA256 038b947aace35c71a4c3ffebe9577176420e4018ac0ba64c408b6835a99bb3eb
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            the-real-index
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                            • Size 1KB
                                                                                                            • SHA256 9af04c2db4b2034b5076901e9ca8ed739c750ba9f5806aa3225ce706577116d3
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            the-real-index
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                            • Size 360B
                                                                                                            • SHA256 bf89023bcafe365653c27b64d678b06d88977bcefc79833579bc15292d775a76
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            the-real-index
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                            • Size 8KB
                                                                                                            • SHA256 35d9aa7bdd8a4aae7c994e97d0faa823a110c00e61e00b0751464b99c9e6bf9a
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Network Persistent State
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                            • Size 8KB
                                                                                                            • SHA256 1e0d506625b8b08c2489fe871693d2898304b37b1646ca7fafb80e60e468aa9d
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Network Persistent State
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                            • Size 22KB
                                                                                                            • SHA256 f5961c5dde7d262ee1af6d2944867ad4722fa69df98f2a8aa393beeafbc37f25
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Network Persistent State
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                            • Size 15KB
                                                                                                            • SHA256 828b733e901b3d8a22c55091c7e2c607d2f7ca74b9750450f535f44ff8015650
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Network Persistent State
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                            • Size 21KB
                                                                                                            • SHA256 b97dd8a6dae5d64c314571bb16582bbaa97623d0c4aa9baea0f852a6440492d7
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Network Persistent State
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                            • Size 21KB
                                                                                                            • SHA256 016395896cf30fb1e7d95cab5ac1d0f5f2f0970a4752805a0873daa83210f455
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Network Persistent State
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                            • Size 3KB
                                                                                                            • SHA256 bb16d0029153e1b5214ebddfb0a511cdb8c4828ade663a03eae5c28f09f57991
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            SCT Auditing Pending Reports
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                            • Size 2B
                                                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                            • MD5 SHA1 SHA512
                                                                                                            Submit Download

                                                                                                            TransportSecurity
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                            • Size 1KB
                                                                                                            • SHA256 6327576e1026de832fe64406c9fdc6023dc6892b2c4769bd2b6eb11dfac7dbe4
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                            • Size 15KB
                                                                                                            • SHA256 0568df856ff3cef45a868ff6f573f3f657233810d196b7e8d7783dca8d22163d
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                            • Size 16KB
                                                                                                            • SHA256 12a21ca5a95ccb94875158e694b9a5fa3dca1c107a08ccc2bf39643ba0f4e952
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                            • Size 15KB
                                                                                                            • SHA256 195940b969bb1232b97feb2fbc0369d58b7dd627f00c1c20879bcb030d63218f
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                            • Size 13KB
                                                                                                            • SHA256 5c05b276697c80bca9b0d14566500ad2fe196072b44f276214fd7c7b529632f0
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                            • Size 13KB
                                                                                                            • SHA256 054fe48b58ae8e324c9d694ce33c9c76208eefb28a8e41f3e6046c5ad8112969
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                            • Size 14KB
                                                                                                            • SHA256 80b0ab67c8871286c2e9210cd9eca9efaa3340db9cf92ed0d70f4909a9adae81
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                            • Size 15KB
                                                                                                            • SHA256 1bee8a70dead6b27d891017b92dbef6ecbefd24b3164e8f97c4eb1ce377bb075
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                            • Size 15KB
                                                                                                            • SHA256 e037aaae00a6e91178858a98373789907f3d47005a626cb933c3482cc5e562d7
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                            • Size 15KB
                                                                                                            • SHA256 3348bd87f34efaf57dfaaa7752089a72b931afbff157b11dd8934ad66924e3a3
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                            • Size 15KB
                                                                                                            • SHA256 0f95de78f9b7b21b02303ebae7c47ee473ef6afa3645ee28b386b067ae08e365
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                            • Size 14KB
                                                                                                            • SHA256 08bd7b6018cd9eccd828fd0022dfb11e889629da23cafe3090af8d7be40dfd6c
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                            • Size 14KB
                                                                                                            • SHA256 d127320f5e85a8ec4b151474fa4accdb0bc627ded370b1438d678ba7380e9249
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                            • Size 12KB
                                                                                                            • SHA256 49a33fdca3340e3b344ce2b69fd84f77f1004d2d7059488e87b36078c6ea5bdc
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                            • Size 15KB
                                                                                                            • SHA256 515fb54be57edde108e034702e9fd51d8ac793b89fc40bc407eebc1874ec1c6a
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Secure Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                            • Size 17KB
                                                                                                            • SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            fa813c9ad67834ac_0
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
                                                                                                            • Size 167KB
                                                                                                            • SHA256 78dbbdcc6d87ce38d85e91352eb0c4b7b785d86faa681d5a100ae9dc4c340e1f
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            temp-index
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                            • Size 120B
                                                                                                            • SHA256 3ba449acd3518f4c5c005309db65c29e8de96821d25bebe434f9c7510dedd7a5
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            the-real-index
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                            • Size 144B
                                                                                                            • SHA256 7906e194aadfe0400bb8a5bd935554aa1e9a1839d66afdede3057cf4586db8ca
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            the-real-index~RFe58ebc2.TMP
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ebc2.TMP
                                                                                                            • Size 96B
                                                                                                            • SHA256 f20cdc9302bd238e7ab950a5e0ad0baaf194d135ea11d5d3b446ac40462af531
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            the-real-index
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                            • Size 96B
                                                                                                            • SHA256 174bc7e7ede878acf3a33e0636a93cdd74bf6098834b5851fd7a2eefc9d988f5
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            index
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\b408405f-3186-4f6d-a41e-c582d4c27537\index
                                                                                                            • Size 24B
                                                                                                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                            • MD5 SHA1 SHA512
                                                                                                            Submit Download

                                                                                                            index.txt
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
                                                                                                            • Size 150B
                                                                                                            • SHA256 d3b47922c329d7dcf9b56e2e18486ef2dd7bdf3ede6abad629314f4e2bb2a66d
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            index.txt~RFe5d4f3c.TMP
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5d4f3c.TMP
                                                                                                            • Size 157B
                                                                                                            • SHA256 412dddbc09f70bc22b02e3ca4febfea1f58ca3c841e58cbac0ab010317429a61
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            MANIFEST-000001
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\IndexedDB\indexeddb.leveldb\MANIFEST-000001
                                                                                                            • Size 23B
                                                                                                            • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                            • MD5 SHA1 SHA512
                                                                                                            Submit Download

                                                                                                            f38e543f-f1bb-40a5-a78b-d0791fc8feff.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f38e543f-f1bb-40a5-a78b-d0791fc8feff.tmp
                                                                                                            • Size 6B
                                                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                            • MD5 SHA1 SHA512
                                                                                                            Submit Download

                                                                                                            Local State
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                            • Size 117KB
                                                                                                            • SHA256 2f9b44ceec00ab7cdc308a49fc76dc62394989a17bf167f05af5999e664fcc5d
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Local State
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                            • Size 115KB
                                                                                                            • SHA256 6eebf3900acd31930896e183869779c794fd1512f917835ca984a98d6b3fd913
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Local State
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                            • Size 117KB
                                                                                                            • SHA256 6579f6b03ff0812997c7bf781ee1208273ac2fdb3beb394c5fdb8886684c712d
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Local State
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                            • Size 116KB
                                                                                                            • SHA256 031ef212b8a991686e08fdeedb8184cdd60c87c50c7819df94ee32ac004ddf54
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Local State
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                            • Size 117KB
                                                                                                            • SHA256 be1a817e30c538c6ba39d8a969a0736a9c60e7949406023f248a293beace67e9
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Local State
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                            • Size 160KB
                                                                                                            • SHA256 b4248cfd299050a59bcf4a41a7319e89d0e29bb22c32b829c996e9cf3b6dd9aa
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Local State
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                            • Size 117KB
                                                                                                            • SHA256 d2073c1bbf93303ba13451827412e5b75243717c93bc2818bbd2fab54d508476
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Local State
                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                            • Size 116KB
                                                                                                            • SHA256 f4e9d762bff6e65202d86fcee1df35edd30215d90f983ded32be945e018f9562
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            f_000002
                                                                                                            • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\Cache_Data\f_000002
                                                                                                            • Size 54KB
                                                                                                            • SHA256 2b99b8401302b73a51c25c526293c2b10a7f940801b356c7bbe40a383b60888e
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            133.0.5932.56.manifest
                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\133.0.5932.56.manifest
                                                                                                            • Size 225B
                                                                                                            • SHA256 e641638ccfb3e00cf9f15c8863b8ee3bc2337a4b562add156859668d80056bd9
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            150x150Logo.scale-100.png
                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\Assets\150x150Logo.scale-100.png
                                                                                                            • Size 2KB
                                                                                                            • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            150x150Logo.scale-100_contrast-white.png
                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                            • Size 1KB
                                                                                                            • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            150x150Logo.scale-140.png
                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\Assets\150x150Logo.scale-140.png
                                                                                                            • Size 3KB
                                                                                                            • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            150x150Logo.scale-140_contrast-white.png
                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                            • Size 2KB
                                                                                                            • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            installer.exe
                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\installer.exe
                                                                                                            • Size 9.1MB
                                                                                                            • SHA256 8f8fb47349b24e10379baf9e6e320519e2d0f443ed92eb49ea114ce59d28a3c0
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            custom_partner_content.json
                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.56\resources\custom_partner_content.json
                                                                                                            • Size 245KB
                                                                                                            • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            opera.exe
                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                            • Size 2.9MB
                                                                                                            • SHA256 02688cc18d0c464b2e94cd39b017dbd2c4a447d851a1d15ad49a5ee5448583fb
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            +JXF10267390518199598851.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\+JXF10267390518199598851.tmp
                                                                                                            • Size 424KB
                                                                                                            • SHA256 83ff53f599acefc11f5cf63fd0516d4db72aacf7f0125a5f79c9ff222cbf9dd7
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            +JXF13418996207927927526.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\+JXF13418996207927927526.tmp
                                                                                                            • Size 156KB
                                                                                                            • SHA256 7149f8f1d8b0386ab74427c78d660e211c572ffd901897f86475319d28248083
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            +JXF16041733973133302271.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\+JXF16041733973133302271.tmp
                                                                                                            • Size 477KB
                                                                                                            • SHA256 a4ece920f221b78d43b550d615c5934db162b64a331ffa663a85199e74ef2e6b
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            +JXF5071340329520141238.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\+JXF5071340329520141238.tmp
                                                                                                            • Size 141KB
                                                                                                            • SHA256 b2efabca5ea4bc56eea829713706b5cd0788b82aca153bd4adde9b1573933b4f
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            +JXF9483119622716227332.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\+JXF9483119622716227332.tmp
                                                                                                            • Size 132KB
                                                                                                            • SHA256 9287925cae90ac480804094ff0876832065e2db116470da1f524d79ed9c18b70
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Opera GX Browser.lnk
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\Opera GX Browser.lnk
                                                                                                            • Size 1KB
                                                                                                            • SHA256 a3b56f829e05ce6131a536874a2851b7ccdb1a60db9fcd26707e2d6e7ad7de54
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            additional_file0.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\additional_file0.tmp
                                                                                                            • Size 2.8MB
                                                                                                            • SHA256 0f50bda78a34e09ccfd5e33a7958de9eebe9863cc3d875e8b9c52dec3f3a9992
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            assistant_installer.exe
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\assistant\assistant_installer.exe
                                                                                                            • Size 2.5MB
                                                                                                            • SHA256 e86907d20a18c6b99e270a4422e0c279079e8a118b6bd7fbb4001161ddc881f4
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            dbgcore.DLL
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\assistant\dbgcore.DLL
                                                                                                            • Size 196KB
                                                                                                            • SHA256 a2777992696c953c001dabade3f236f731987b58061efd8c894815f9939f979c
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            dbghelp.dll
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\assistant\dbghelp.dll
                                                                                                            • Size 1.8MB
                                                                                                            • SHA256 102419e70ed462dd1ef4a30d94b714c4317ea838d7acc85ae030dfca19f609ab
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            installer_prefs_include.json
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\installer_prefs_include.json
                                                                                                            • Size 242B
                                                                                                            • SHA256 40ea1fbf69784552a6aca6f03f95b7ec4c38332d39c88322835c70b661d643dd
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            installer_prefs_include.json
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\installer_prefs_include.json
                                                                                                            • Size 967B
                                                                                                            • SHA256 f6a7cb993b00aa3eaeee857c5b342218e84b1fb31e26f875de6171b705bdae35
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            installer_prefs_include.json.backup
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\55b46669-cf71-48dc-8487-b8b4def8a265 Opera GX Installer Temp\opera_package_202607231830351\installer_prefs_include.json.backup
                                                                                                            • Size 227B
                                                                                                            • SHA256 97331f17409895395d817dd6dab7119ff107665a9f866a3c2926bfa9ada6b1b7
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            installer.exe
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\7zS8E2E4E5A\installer.exe
                                                                                                            • Size 9.1MB
                                                                                                            • SHA256 b2ef4520d58bc51ca5ab413180576aaae68dc78567183443629961f3e936d882
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            200.ico
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico
                                                                                                            • Size 116KB
                                                                                                            • SHA256 9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            BrowserInstaller.exe
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe
                                                                                                            • Size 3.7MB
                                                                                                            • SHA256 e20f18d8c5d3621a81d35fe43d759ddb148e35d1856a94fbe95dfbec93127a10
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            IRIMG1.BMP
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.BMP
                                                                                                            • Size 12KB
                                                                                                            • SHA256 1d7a67b1c0d620506ac76da1984449dfb9c35ffa080dc51e439ed45eecaa7ee0
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            IRIMG14.PNG
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG14.PNG
                                                                                                            • Size 43KB
                                                                                                            • SHA256 6528bb11becf79c17c77a9c6624b82074b9dd6d3e932852c8fe1da22a57854aa
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            IRIMG15.PNG
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG15.PNG
                                                                                                            • Size 644B
                                                                                                            • SHA256 207bd7ad2eb7f48a2a1be1253363fa120ae79e25eacbd37d6b9be52d2128bfdd
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            IRIMG17.PNG
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG17.PNG
                                                                                                            • Size 40KB
                                                                                                            • SHA256 06fad383e3506eb1be52877bee839b833de157a2601af1c443ef1244a92f5d8f
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            IRIMG2.BMP
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.BMP
                                                                                                            • Size 12KB
                                                                                                            • SHA256 9c893fe1ab940ee4c2424aa9dd9972e7ad3198da670006263ecbbb5106d881e3
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            IRIMG3.BMP
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.BMP
                                                                                                            • Size 12KB
                                                                                                            • SHA256 4c85cdddd497ad81fedb090bc0f8d69b54106c226063fdc1795ada7d8dc74e26
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            IRZip.lmd
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
                                                                                                            • Size 400KB
                                                                                                            • SHA256 3a6794c90d69383bd76098992cb512ae343cb2e1a3680dd4794e49895472b429
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            Wow64.lmd
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
                                                                                                            • Size 252KB
                                                                                                            • SHA256 27b48727237cd0f8a1205e01e5c93cbe6c7a2f3938faf8d8daa5191094c347a5
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            irsetup.exe
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                                                                                            • Size 1.8MB
                                                                                                            • SHA256 96070b2d82b6bffd54719f9753909be5f5151edbd5b37b26f50dea2e995ea430
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            lua5.3.dll
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.3.dll
                                                                                                            • Size 395KB
                                                                                                            • SHA256 eef58c3dae331da03872b973230aa56b40e34035035cca5b468eda0c40daa819
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            irsetup.exe
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                                                                                            • Size 1.7MB
                                                                                                            • SHA256 ea04ee2883ca5dcb461ea894a4e2def7d0c89f11d9f06f3bae020f6a25e7b75d
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            lua5.3.dll
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.3.dll
                                                                                                            • Size 395KB
                                                                                                            • SHA256 0e43d22649d6b2ecbac9915dc6498fe1f41777dd33147d962b30dad0d5e76ab3
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            opera-installer-bro.exe
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                                                                                                            • Size 3.9MB
                                                                                                            • SHA256 6d4532e65c854eb66b00c97a1d33b886eb7522a7069a6dc6b8b7daea2a449e2c
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            setuparguments.ini
                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
                                                                                                            • Size 801B
                                                                                                            • SHA256 d431dd610af9afbaaac50c2db2952adff6f40b7ff8329894ae24fca66a18991d
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            TLauncher.exe
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                                                                                                            • Size 9.2MB
                                                                                                            • SHA256 8cdc16a8f34f99dc85273838350ae9a9a840de8c6dda3c045c5514520842dd78
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            IRIMG1.PNG
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG1.PNG
                                                                                                            • Size 45KB
                                                                                                            • SHA256 a42ab4d62c5a5286202df15f9ad32b22396d5d12c7a4db8c5a2c98f90160ade1
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            IRIMG10.PNG
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG10.PNG
                                                                                                            • Size 206B
                                                                                                            • SHA256 348e3f3544cca4c9ca2af323fa8b3453a70ea421c82b331681dc1d4ef74921f3
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            IRIMG13.PNG
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG13.PNG
                                                                                                            • Size 41KB
                                                                                                            • SHA256 1708790d5496b9cc325cc0249cfa272aac3c3738188fc41eef83e8592de247ff
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            IRIMG3.PNG
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG3.PNG
                                                                                                            • Size 475B
                                                                                                            • SHA256 d339d7a5fcaff72292150f3c7db87a73caa396e23224b570e053c8bb96a3a897
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            IRIMG4.BMP
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.BMP
                                                                                                            • Size 451KB
                                                                                                            • SHA256 64da5bd044908b2c3a725c5a55edec1644be498f41ea05d42a6ae8cd797f1d80
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            IRIMG4.PNG
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.PNG
                                                                                                            • Size 368B
                                                                                                            • SHA256 3207283d0abc0dd36c0991b40a738247394bbc92e5696eb790a5c888a9f28106
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            IRIMG9.PNG
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG9.PNG
                                                                                                            • Size 438B
                                                                                                            • SHA256 d16a8eaf8f979e45bacbbd8ef14afe482d74e926dff2e87e569342874ba34145
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            uninstall.xml
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                                                            • Size 21KB
                                                                                                            • SHA256 eed3258624c1cfc43994af48a68cfb84aba8ba6c31efc499bcccf182184329ca
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            uninstall.xml
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                                                            • Size 21KB
                                                                                                            • SHA256 dbec3e95e5f23a17bbe4a1c939f702aa3af13aa6021aea6b227562c438102c51
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            version_manifest.json
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_launchermeta.mojang.com\mc\game\version_manifest.json
                                                                                                            • Size 201KB
                                                                                                            • SHA256 9871ece60c7012887b9d55bc553e2829d142456b53c97ff4461bf3af2f27c8ee
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            inner_servers-1.3.json
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\configs\inner_servers-1.3.json
                                                                                                            • Size 7KB
                                                                                                            • SHA256 237560409308f6dd5cebbdab6a5514b2f7ebf847e019e9c6fe8c7ae0cffc01a8
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            index_en.html
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\configs_v1\pages\index_en.html
                                                                                                            • Size 49KB
                                                                                                            • SHA256 54e5946fdcc2238c6b74d71f6778f26ecf7353c6008dbbb2b80c1c401370e3b2
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            libraries-1.7.json
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\libraries\org\tlauncher\authlib\libraries-1.7.json
                                                                                                            • Size 377KB
                                                                                                            • SHA256 0a37d481b94fe7fb9fc60162c22038690c7d67eab09b0b2bfa3445dd01b23710
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            additional_assets-1.1.json
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\additional_assets-1.1.json
                                                                                                            • Size 190KB
                                                                                                            • SHA256 12ea0578ab812f6e6730ea5b23e7f8bfcbaec59e801b8699abc1e773a3b7476b
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            version_manifest.json
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\skin\versions\version_manifest.json
                                                                                                            • Size 12KB
                                                                                                            • SHA256 e5a04128c61d6c23b527b4914f3cacb711a6691d2eab89813f7f2f5a9d34069f
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            version_manifest.json
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\downloads\versions\new5\version_manifest.json
                                                                                                            • Size 48KB
                                                                                                            • SHA256 f39279fac3a1001f213d3bdafcffac010e2cc7bda85abf2415c63955e5b834ee
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            additional_hot_servers-1.0.json
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\lch\additional_hot_servers-1.0.json
                                                                                                            • Size 12KB
                                                                                                            • SHA256 c03f3aeac6f97613f15babf20a337aeab074105b1723f5968080ddae0d065300
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            hot_servers-1.0.json
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\cache\https_repo.tl.vg\update\lch\servers\hot_servers-1.0.json
                                                                                                            • Size 16KB
                                                                                                            • SHA256 295caa850c8c68492386a2353db11e93a54245b442767cdd46e2dad1208d85a8
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            dependencies.json
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9371\dependencies.json
                                                                                                            • Size 25KB
                                                                                                            • SHA256 234df7a7768bb58ddfc7d35eb0f44ab0b2c9400f4dc956fa51bfbf776bb3c86a
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            resources.json
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9371\resources.json
                                                                                                            • Size 17KB
                                                                                                            • SHA256 44c898c6684ab882a034f02cf8193c3777adea8bb009749c05697a00bf8ee2e4
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            appConfig.json
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\appConfig.json
                                                                                                            • Size 4KB
                                                                                                            • SHA256 ae102a86f96ea31bcbe9e7110c7a8d6a067e02107aefa0dca3244c8ecc5cc86c
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            javaConfig21.json
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\javaConfig21.json
                                                                                                            • Size 3KB
                                                                                                            • SHA256 4e677c3608065a9a12f97bededc27fd440711f94288012207645df37f516d699
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            starter-core-1.268-v6.exe
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\update\lch\starter-core-1.268-v6.exe
                                                                                                            • Size 9.2MB
                                                                                                            • SHA256 f0cb809918c2bf85a8eef2bcbd35218e75426b4e5698ca1cca50acf3e5a714ce
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            COPYRIGHT
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\COPYRIGHT
                                                                                                            • Size 35B
                                                                                                            • SHA256 7afb3a2dc57cb16223dddc970e0b464311e5311484c793abf9327a19ef629018
                                                                                                            • MD5 SHA1 SHA512
                                                                                                            Submit Download

                                                                                                            LICENSE
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\LICENSE
                                                                                                            • Size 33B
                                                                                                            • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
                                                                                                            • MD5 SHA1 SHA512
                                                                                                            Submit Download

                                                                                                            ADDITIONAL_LICENSE_INFO
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ADDITIONAL_LICENSE_INFO
                                                                                                            • Size 51B
                                                                                                            • SHA256 0a256a7133bd2146482018ba6204a4ecc75836c139c8792da53536a9b67071d4
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ASSEMBLY_EXCEPTION
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ASSEMBLY_EXCEPTION
                                                                                                            • Size 46B
                                                                                                            • SHA256 a4b7ad48df36316ddd7d47fcecc1d7a2c59cbfe22728930220ef63517fd58cb0
                                                                                                            • MD5 SHA1 SHA512
                                                                                                            Submit Download

                                                                                                            LICENSE
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\LICENSE
                                                                                                            • Size 35B
                                                                                                            • SHA256 01a4ebd2a3b2671d913582f1241a176a13e9be98f4e3d5f2f04813e122b88105
                                                                                                            • MD5 SHA1 SHA512
                                                                                                            Submit Download

                                                                                                            default.dic
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                            • Size 2B
                                                                                                            • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                            • MD5 SHA1 SHA512
                                                                                                            Submit Download

                                                                                                            settings.dat
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                                            • Size 40B
                                                                                                            • SHA256 0055efa45839aa1a1ae3a533c9d8ddfabfdf5bf0eab9ace8a451abda97c3dbf0
                                                                                                            • MD5 SHA1 SHA512
                                                                                                            Submit Download

                                                                                                            087579c0-c7d2-4f76-972e-4fcebceb1cb6.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\087579c0-c7d2-4f76-972e-4fcebceb1cb6.tmp
                                                                                                            • Size 173B
                                                                                                            • SHA256 c56edd9472bef7d8dd77858ef620ae5699f3d3ad12119ccad5e73e8f022b3406
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            136109eb-a9e3-4694-a255-edbd829f37ea.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\136109eb-a9e3-4694-a255-edbd829f37ea.tmp
                                                                                                            • Size 162KB
                                                                                                            • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            36cf2540-a333-4ea3-a161-af3e0846dab3.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\36cf2540-a333-4ea3-a161-af3e0846dab3.tmp
                                                                                                            • Size 12KB
                                                                                                            • SHA256 0b1e0633085cb872a42f83085455b506474635eccf281a877a97beb450602f21
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            47db3cb3-b748-47c9-b3da-7bcfb54970cd.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\47db3cb3-b748-47c9-b3da-7bcfb54970cd.tmp
                                                                                                            • Size 171B
                                                                                                            • SHA256 63103e93dc9cc021107538bd66fda5dc2a09b23c0c09c99bfd3c7500c1926761
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            8faf6fe6-b7fd-48d3-8fe0-606d2a94e210.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\8faf6fe6-b7fd-48d3-8fe0-606d2a94e210.tmp
                                                                                                            • Size 412B
                                                                                                            • SHA256 e7c89b86e35f653bfdf1468339c92aa89cf941f7284218e37ddc000be74f60d0
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            e6640bec-a6cf-43e1-bb74-1eb8c25ec29e.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\e6640bec-a6cf-43e1-bb74-1eb8c25ec29e.tmp
                                                                                                            • Size 48B
                                                                                                            • SHA256 ef3d6e79a1b733e7d7a836a24e27b6795d0846e4c5230fd2203d57aa1364be50
                                                                                                            • MD5 SHA1 SHA512
                                                                                                            Submit Download

                                                                                                            the-real-index
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                            • Size 600B
                                                                                                            • SHA256 26b836a753f9f01a6738eb793ddd43fd8a10a1c0b3982e9490c8654b27246383
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            CURRENT
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\CURRENT
                                                                                                            • Size 16B
                                                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                            • MD5 SHA1 SHA512
                                                                                                            Submit Download

                                                                                                            MANIFEST-000001
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
                                                                                                            • Size 41B
                                                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                            • MD5 SHA1 SHA512
                                                                                                            Submit Download

                                                                                                            Preferences
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                            • Size 15KB
                                                                                                            • SHA256 7a28c1b4c5996b9b2e9ba992d69014128763da34a755f2fe9b9df889c4f72c44
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            9ad9639e-4e67-4485-8c88-d96174947fa9.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\9ad9639e-4e67-4485-8c88-d96174947fa9.tmp
                                                                                                            • Size 72B
                                                                                                            • SHA256 914ee1dff96cd5ef400ef63ee5b2644db421a44838c1e460b4b21de5c36b52cb
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            the-real-index
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                            • Size 72B
                                                                                                            • SHA256 e69d62b9fc3e6d51c4f3d9590f945b5350ae9bd4404f0513603904468f794e86
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            1dc0b682-6ddd-4d41-bf2a-6e1257aa5b8f.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\1dc0b682-6ddd-4d41-bf2a-6e1257aa5b8f.tmp
                                                                                                            • Size 381B
                                                                                                            • SHA256 ba1e1ba5a57c2d2d50c830b4125858e2cfb93425885e1a77b83519bb9e07bd47
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 11KB
                                                                                                            • SHA256 10ed40a4097b01625ab4535495b5bccdb87aefa51c41391a58ffb00b0406bd20
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 11KB
                                                                                                            • SHA256 3d6999b1bce2d5da9e8da8546cc532d6cfab4cf4ecf1d519527757b5bd9ad879
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 1KB
                                                                                                            • SHA256 9a2201573d8212aa1789c86d132db8055f24f43119e0d435ffaf6c65bf7e5e11
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 2KB
                                                                                                            • SHA256 6a8b774fd08dc21ba6e74e42099082d22e1fca54f7ecb3b3c544c166a3c2f89c
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 2KB
                                                                                                            • SHA256 3bb31d6ca8ce71a0e351e874f62e2207d49e03746fa747f93cb31bfc8f080d16
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 2KB
                                                                                                            • SHA256 aa368890b58d27beddbf6b8488584b08060cc9519e2297d1fdb21021f892abf4
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 2KB
                                                                                                            • SHA256 8faddbb7995377168f670d1217d2bbe4357c9fc1dda160dbc6c3601ed6e716bc
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 2KB
                                                                                                            • SHA256 ac8765163706fc37069e745368e2cb6921ebfe931a7c0de0af48f8bf9b6510c2
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 a50c02f348965c63f8a35eb129807f2584a8794eb22388c17d12abb881cd92af
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 ccf27237c3427565bb3e87bf69880bd15311ccb7a2d20f3c70b0bac6ddc781ec
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 9KB
                                                                                                            • SHA256 2ed5dec9270d7dec3dfdaa6280319141ad33ff8a011f0aabf318b923aa5153d7
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 11KB
                                                                                                            • SHA256 245c6a6867b37a0993052ae263d9de57dc20e4752a8a4a5d46b5942f34692701
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 11KB
                                                                                                            • SHA256 f785cb8d304214808e7ebff361352b362c3cd12a2aae7a5e79dc5d8c406c34dc
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 11KB
                                                                                                            • SHA256 fbb50bf3192941b3ba69ef5d13adb5bd59f884008365c26cf8d0ca4ef68960f7
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 11KB
                                                                                                            • SHA256 b64599b5df7e2973be29b042d441af31be44c231400742e23e6bbc4e68a79b05
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 11KB
                                                                                                            • SHA256 82eb1c967a8eab06f81dc98e501b70fa4257a4ae096caf8f0a8d5869fb7bac6d
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 11KB
                                                                                                            • SHA256 58c11054941e439d9522d894688b80f943f697a6600acd96d147cbf121524353
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 493B
                                                                                                            • SHA256 c39bbfd274bb57088926f58f1d2bd4030939b38872014b5dc0a88adabdcbfeef
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 605B
                                                                                                            • SHA256 b2b37b01ddd998ca02e7283b192db19b920052283f2edb91d81a3a6de05ac85b
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 733B
                                                                                                            • SHA256 a3ac245065b9d18acce31e2db1c2aa394b7f9ad71fe08bac19e199f1e42d37d3
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 909B
                                                                                                            • SHA256 ff69f5ae8ee720eca0967ed3c0a2b3af83d9819e5a87265dbaf253886c748b33
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 1KB
                                                                                                            • SHA256 157a0c44acee60b74cfbcfdbd71de59dff9c24569d168441ca585955902e7324
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 1KB
                                                                                                            • SHA256 44518586b2c7809bf346f05fc0e9eaefcd3cc1874dfce27619a1c6e429c92c43
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 1KB
                                                                                                            • SHA256 37ee7a8924ff90c47b580ffc52c31b62ccac28870a633230fbdafa2adb59f371
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 1KB
                                                                                                            • SHA256 1570a215a8fd960fe4d6c08291bb9d6c9e1f782cf598b83f8eeefdb6c0f25c00
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 1KB
                                                                                                            • SHA256 27e0ca780d689df8cf76ac8cccc9fff15b40eaa946e03698c6dfed61d1e6013c
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 1KB
                                                                                                            • SHA256 90ce7cc18dc6a57c1fcaa97259ede90c4ca0219103620cf077896c489ab97a61
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 1KB
                                                                                                            • SHA256 80207f18d094cebde80a8592dd5319f7fe4a37c5ffe1312d1027782740a58fbc
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 1KB
                                                                                                            • SHA256 efffde7043b38a3f45096a28f147c1d54a98ef8d5f6b6d9ec6dc6cd2fc011066
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 2KB
                                                                                                            • SHA256 764c93963621373698f8f10917d3515b1df417c20832c2e9302be5397aa50805
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 2KB
                                                                                                            • SHA256 dacd1fd5cf5a6cd7e4295fda62af7460faf00d641269df9399e1e52afbbdb6f1
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 2KB
                                                                                                            • SHA256 687c32e4d5fed6df5a4b7bba465c84d30a14dcc9d44fc52699fdec20ffe6dd98
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 aad4a4b91f308e5ab71c8ef795a73c43e6a8aec628cb03ff7455e3b35eaf1368
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 3ec66c4bd935b6302008223a69af012c7a1962678c24a4e8d7ca739c6ccb9802
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 1f1ea1af67a8b82371305b6c1b3ebae76ebb8329f30f018bf161d0e3de68a7a9
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 5c2393044574f27035708cd830b7586a3648aa91dd32bf3035c8869dab14284e
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 9f983641a277632bfff2e1d51f45df87ba92e5cc155543731b502582a0455c76
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 aaf4f9d2d8f1333ee88bca370371714897653a10713ed023e3dd08846cf611a5
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 7f5caebefe743fa05823a9919079e5d64128a3ac944bbefc8434500d21bf63bf
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 3d019365e12d18678cab9a36b55399e2bcd40b246b9771713a764cf2f992ab37
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 419b8422a96afae9433c35d19a7729dd393bca4769f85b5901ea68dd3ddf29b7
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 370304aac0d35bc3be635c4f99a9027466a713f3254086bb9cf49663ba7adf19
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 f033be30c7e44d65e135d3e713a72ec86c1c43579121187fa1a420bf6a46e20d
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 4dd8d86974579507fae349d84e16a79918fafa4905f725b10b64939d258246b5
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 cf2d1eb5de36afba0141fbe396823659cab214887de2e02deaadf629ff61a4e2
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 6db3602bea464f2ffa40d7906930c9ba147398425e3d12951d861a9c3b0b7a9b
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 bda6d6a51e519e6f19fcb97850d25c130c85bb691361f2e401545013d2773f42
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 4KB
                                                                                                            • SHA256 500cca17a2481799d742a611947e9d78ee8010a03a9d3ef5e2400817b6f390b5
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 4KB
                                                                                                            • SHA256 f6fdb99190a28888dd7bb56d4ca0c7a56dff0cae67cb9831d6534ad882e885e8
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 4KB
                                                                                                            • SHA256 508865fd67d22d392856e728daf57f1865c032c30aed12ea80257e78de0a376e
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 4KB
                                                                                                            • SHA256 b216d7c12ed5d83c13a0df0b089922ac831775c509e16b4edc50c19365d6d180
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 9KB
                                                                                                            • SHA256 6272c26f9d1eedd279495633701f4089c92af649fe0ac98a5dd6cfb2620c8533
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 9KB
                                                                                                            • SHA256 a9308be1684b6a044b30ac0fa1a3c8c65415d2460af6c367ca6185c0ed097d4a
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 10KB
                                                                                                            • SHA256 2d071b87ad5884654cc1cdb4068f9cba0e990c24d60d29949763aa834998d5f4
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 2KB
                                                                                                            • SHA256 e14a900b8ce2479d0bf264352210ca7afc0271deb49244e61cfab5220c54f332
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 10KB
                                                                                                            • SHA256 7565eb85dee10a7d4aae377f91ba560db26699275bf02f634f147669b7f7285d
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 10KB
                                                                                                            • SHA256 aadabee899c9c7647b1e8bee86350fc6ca3ef3d64e43c3e40102b2f4575855cf
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 55ce00d0c6768ee55771caef581ddddf6edb907f5e0c7a5c9460ea18c17bcad7
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 0f2b96fa5d173c886c619a0f8c297d5cb4ac9aac3bcdacd13beda48c898b6b29
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 3KB
                                                                                                            • SHA256 74f423c4852aa74f7b2e8111fa05492954d1dc28a68e57fbb6f7ad38ac72a37e
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 11KB
                                                                                                            • SHA256 61baa68d567dc3a1c3994dea92d6c7c71ab07406e96abce31d63fd3248449d3b
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c0d54a82-c426-4a8e-8663-1310fb99c355.raw
                                                                                                            • Size 11KB
                                                                                                            • SHA256 7713e9ab7d384bd697dfffcb82d272832bfaa06a732fb3e2afe24c65a2fe7ea9
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 1KB
                                                                                                            • SHA256 129f7b9ebf97e6fa755b73d21c9d49cf73cff772bc2e7737af65bb0164fa78e4
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 690B
                                                                                                            • SHA256 2c735b21d2680fa8a6fb9ef5ef9d38ed613eaf39bb7f55f527f653f87e57c727
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 779B
                                                                                                            • SHA256 47379c86ecf4f91d8926813d7fa7da82cdf376204ad1ea12ce23f117487d507e
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 870B
                                                                                                            • SHA256 e588bdb88f50e039322213b96f0e956f6c9eb3f9677680b33a81d7b0bef451f6
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 963B
                                                                                                            • SHA256 ea0a03c95e731916fbb9da50bd9ea7ec29bba71285b21b8259f32435891fa82b
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 1KB
                                                                                                            • SHA256 bad0a6feb554b2907d8bc159729613e7a452787c06ab1d58b4e22044eb47ab15
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 1KB
                                                                                                            • SHA256 63a7c2ba5d1603badd1dffbd74487144f3cb48687545a1227381a2aa5eac9fe8
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 1KB
                                                                                                            • SHA256 16a1cda4953e64156336a95c8fde154047f68935f6c43f3f3399ef38a3699d1d
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 1KB
                                                                                                            • SHA256 c65d33ce5fc42e075b233f394999b1f85a47089b85076c6ba8f49636f4ec661e
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 505B
                                                                                                            • SHA256 8396acf897da742f5f7c025fc57357a1d5d90662040b8d3de0e8cdad5f1821f4
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 597B
                                                                                                            • SHA256 85d4f5331d2f2eb9cc7ce57899763c4755583aff9397617646b4324bebc56453
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 4KB
                                                                                                            • SHA256 bb384bc9cfad079ad34795762032ddf5648b5118b575303840472f9b6d269274
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 2KB
                                                                                                            • SHA256 44f53d217d584a55553663fc8e42f950e23d7e4bcead92f88b977cb3c62c7de5
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 3KB
                                                                                                            • SHA256 f5d953a9911b5516c1f40276e9d6b1ba2e204203774d6272acb9f46016036dc4
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 3KB
                                                                                                            • SHA256 823fe4f080cbacf443352c1e967dee992e885b93629f00c05f5454e43256ede5
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 3KB
                                                                                                            • SHA256 4de44856488217a8a5b96fdb62f0132e906eac44bfa21a685bbcbb34d6b0121d
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 4KB
                                                                                                            • SHA256 c9dfeb8c02403cd602e99017ab218544f52cc6d9f6a23e645ac17cf5a9ac0222
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 4KB
                                                                                                            • SHA256 e63c4767f91f940107f0a5aec655e0daaa9017474946b8bca1c415dc3716adf0
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 4KB
                                                                                                            • SHA256 b9f87fdd577b52558b42f9399c1be838893f54e2e28c4f2222edf391f01c01cb
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 1KB
                                                                                                            • SHA256 5f6da996b0f05956205a1225de06d983c105bde833676117113cc93879f053c9
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 4KB
                                                                                                            • SHA256 b292e1e961440bdafda7905b2f66f07ce134496f9d522bd47454a510f0f5d680
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 1KB
                                                                                                            • SHA256 d6916d374df66dfa4d71004fa61a31a7f5b0eb41675a07f0b1496a6d3ac532ea
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.0.1361819107
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.0.1361819107
                                                                                                            • Size 1KB
                                                                                                            • SHA256 af8e42e72b91cff9aabea7abdd2b5b129b4f5abcc3363b9a067c76013eaf48f9
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 362B
                                                                                                            • SHA256 63d23ef7f662465978d38f799b3fa5b0b13fbe956535a6d02ff0530f6908afee
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 224B
                                                                                                            • SHA256 4051d205c1372b00725ef30d0ea44cb88268f238601978d5675b832118a625e2
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 224B
                                                                                                            • SHA256 6a7308dddf32e967fe38ec134baa81f438371c46bc97e991b00d79e0f7603a4a
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 224B
                                                                                                            • SHA256 98d0eaaf27566c38ec6a3f531982e812045cd3dbf551d08e85839b6b00aa483c
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 522B
                                                                                                            • SHA256 0c53c5a0a4d8bc71c4b964be1777905da9ae1878bc61170e5a957b48a6594b84
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 1KB
                                                                                                            • SHA256 838d95566a3306366c92cbe7aefa327d586ab8eff2e74699ddd0857e1716c200
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 2KB
                                                                                                            • SHA256 00f9c8d70296e00165306258502d1375a0fb5d4405366745e9ba4d1c50b20b6e
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 2KB
                                                                                                            • SHA256 5237891801037579a746bb0e6caa19aba113bf4080ff6105d5eb0fae7928c763
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 460B
                                                                                                            • SHA256 7d5a76bf307e703ecc1b148add7facf83df6fd1e43e6420d3c42e91472ccc93b
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 2KB
                                                                                                            • SHA256 f99a4e3fc7f7e13af86ead259280ed35ade7e5b849f9e18838c50428099cca53
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 224B
                                                                                                            • SHA256 18615b94fb6c8b4de93cb63ff41e6884517bc9b231b76d2b252a0378f4e18441
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 2KB
                                                                                                            • SHA256 cea9267bcf1d9e8a30b0abcbd94da82c4d16d8a99e232739bf101ebac76a3ebc
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 2KB
                                                                                                            • SHA256 15f88720e047f35eb8b44381c2b9879aafc9db9e81d08ab87cfe6a46385da94e
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 2KB
                                                                                                            • SHA256 aab2a60b64739065880177d72d3a9d4d4eed9a14707345a9e46656f98d7230bd
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 3KB
                                                                                                            • SHA256 64c8e4ee4c8d7d2e66c7b155b898c7fed2e40c2b134883e1bcb191d3b2169c1f
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 200B
                                                                                                            • SHA256 ec50a53edb7a05654850f3ccc588ed3668b3f16fff26e60721bf573a0905ac82
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ssdfp6012.1.1770234454
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6012.1.1770234454
                                                                                                            • Size 2KB
                                                                                                            • SHA256 7e6a7975e21ed744b25f1b2081a4ed1d715c9846b5a57171b6cd8fa0d3574319
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            data_0
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                                                                                                            • Size 8KB
                                                                                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                            Submit Download

                                                                                                            data_1
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_1
                                                                                                            • Size 264KB
                                                                                                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                            Submit Download

                                                                                                            data_2
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
                                                                                                            • Size 8KB
                                                                                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                            Submit Download

                                                                                                            data_3
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
                                                                                                            • Size 8KB
                                                                                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                            Submit Download

                                                                                                            Local State
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                            • Size 3KB
                                                                                                            • SHA256 c42e60a18a05f53e45dcfb68d2032b220ad5a5bcb91246f67a8ee62738845452
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            ad2115c2-10e2-444a-ae3e-1f29b41f1250.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\ad2115c2-10e2-444a-ae3e-1f29b41f1250.tmp
                                                                                                            • Size 151B
                                                                                                            • SHA256 4617df5da52493b3918538d5585dc8c058bba10b220eba4b76a426a715f9017f
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            assistant_prefs.json
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json
                                                                                                            • Size 151B
                                                                                                            • SHA256 978fcb206cdd4ea97242784bf3634ed7a47cf673eba52d078a79287d8402249c
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            f89b0f1e-99ec-425d-a862-8bdda10fb46b.tmp
                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\extensions_crx_cache\f89b0f1e-99ec-425d-a862-8bdda10fb46b.tmp
                                                                                                            • Size 13B
                                                                                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                            • MD5 SHA1 SHA512
                                                                                                            Submit Download

                                                                                                            Unconfirmed 521291.crdownload
                                                                                                            • Path C:\Users\Admin\Downloads\Unconfirmed 521291.crdownload
                                                                                                            • Size 25.5MB
                                                                                                            • SHA256 0619bd07d3183a8ae0cb1be408c6ad32295d47ddd666b2d51edd4d5f5d211227
                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                            Submit Download

                                                                                                            desktop.ini
                                                                                                            • Path C:\Users\Admin\Videos\Captures\desktop.ini
                                                                                                            • Size 190B
                                                                                                            • SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                            Submit Download

                                                                                                            memory/1712-971-0x00000000009E0000-0x0000000000FD7000-memory.dmp
                                                                                                            Download

                                                                                                            memory/1712-3311-0x00000000009E0000-0x0000000000FD7000-memory.dmp
                                                                                                            Download

                                                                                                            memory/1712-3924-0x00000000009E0000-0x0000000000FD7000-memory.dmp
                                                                                                            Download

                                                                                                            memory/1712-1912-0x00000000009E0000-0x0000000000FD7000-memory.dmp
                                                                                                            Download

                                                                                                            memory/1712-883-0x00000000009E0000-0x0000000000FD7000-memory.dmp
                                                                                                            Download

                                                                                                            memory/3112-1744-0x0000000000830000-0x0000000000E31000-memory.dmp
                                                                                                            Download

                                                                                                            memory/3112-955-0x0000000000830000-0x0000000000E31000-memory.dmp
                                                                                                            Download

                                                                                                            memory/3112-970-0x0000000000830000-0x0000000000E31000-memory.dmp
                                                                                                            Download

                                                                                                            memory/3112-845-0x0000000000830000-0x0000000000E31000-memory.dmp
                                                                                                            Download

                                                                                                            memory/3112-844-0x0000000000830000-0x0000000000E31000-memory.dmp
                                                                                                            Download

                                                                                                            memory/3112-1740-0x0000000000830000-0x0000000000E31000-memory.dmp
                                                                                                            Download

                                                                                                            memory/3112-258-0x0000000000830000-0x0000000000E31000-memory.dmp
                                                                                                            Download

                                                                                                            memory/3112-1863-0x0000000000830000-0x0000000000E31000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5936-1859-0x0000000000400000-0x0000000000420000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-1987-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-1994-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-1870-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-1919-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-1933-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-1942-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-1946-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-1980-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-1978-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-1940-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-1981-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-1996-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-1995-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-3933-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-2022-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-2062-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-2070-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-2179-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-2194-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-2351-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-3931-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-3925-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-3917-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-3892-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/5976-3909-0x0000021D30540000-0x0000021D30541000-memory.dmp
                                                                                                            Download

                                                                                                            memory/6952-3692-0x0000020DF2C50000-0x0000020DF2DC4000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7088-2400-0x00007FF829300000-0x00007FF829301000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7088-2399-0x00007FF8280D0000-0x00007FF8280D1000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4104-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-3935-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-3981-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-3992-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-3999-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-3997-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4003-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4011-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4020-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4017-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4022-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4025-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4048-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4096-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4336-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4119-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4123-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4139-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4143-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4165-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4179-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4184-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4187-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4229-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4240-0x000001B9C49C0000-0x000001B9C4A61000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4339-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download

                                                                                                            memory/7292-4332-0x000001B9A3610000-0x000001B9A3611000-memory.dmp
                                                                                                            Download