Overview

overview

9

Static

static

1

URLScan

urlscan

1

https://bytebreaker....

windows10-2004-x64

9

Analysis

  • user interaction
    yes
  • max time kernel
    464s
  • max time network
    465s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    07/09/2026, 16:55

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://bytebreaker.cc/
  • Sample260907-vfc9ca1eqg
Score
9/10
adwaredefense_evasiondiscoveryexecutionpersistenceprivilege_escalationransomwarespywarestealerthemidatrojan

Malware Config

Signatures

  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
    defense_evasion
  • Downloads MZ/PE file 10 IoCs
  • Checks BIOS information in registry 2 TTPs 2 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Checks computer location settings 2 TTPs 20 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Themida packer 3 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Contacts third-party web service commonly abused for C2 1 TTPs 11 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Drops file in Program Files directory 4 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Using powershell.exe command.

    execution
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 4 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 10 IoCs
  • Modifies registry class 61 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 46 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://bytebreaker.cc/
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4816
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffab533c728,0x7ffab533c734,0x7ffab533c740
      2⤵
        PID:5016
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1956,i,16931253055823668280,5710208979517694671,524288 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2120 /prefetch:3
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:2384
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1680,i,292729353718151902,15333137176725264962,262144 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2032 /prefetch:2
        2⤵
          PID:3084
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,1586154344512126733,2749441954267889055,524288 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2384 /prefetch:8
          2⤵
            PID:3440
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3188,i,13935363099033632952,13413921730509730019,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3196 /prefetch:1
            2⤵
              PID:2172
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3192,i,7656612618365837637,12810290633420656785,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3240 /prefetch:1
              2⤵
                PID:1556
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4312,i,10616414029841098040,10050950540061639286,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4316 /prefetch:2
                2⤵
                  PID:4904
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4756,i,11429607898631802942,12294632665651169187,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4772 /prefetch:1
                  2⤵
                    PID:1772
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5048,i,2783546445680597140,10699042661872679879,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5344 /prefetch:1
                    2⤵
                      PID:4304
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5192,i,6654093484422894395,16446947989946886108,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5236 /prefetch:1
                      2⤵
                        PID:4104
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5372,i,12586051378933006562,9456510783391851179,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5540 /prefetch:1
                        2⤵
                          PID:1916
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5668,i,4185377600191961242,4165978745300520149,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5204 /prefetch:1
                          2⤵
                            PID:2196
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5056,i,11752198667704012044,6932617313440058210,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4776 /prefetch:1
                            2⤵
                              PID:4280
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5936,i,10963442549148789802,5002140972250834588,524288 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5940 /prefetch:8
                              2⤵
                                PID:4444
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6028,i,6374401015849546006,10942169183436301243,524288 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6068 /prefetch:8
                                2⤵
                                  PID:3108
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5488,i,15687364988927674200,9266934405017108976,524288 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5936 /prefetch:8
                                  2⤵
                                    PID:3768
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5492,i,13285149350139496463,17884816914102488906,524288 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6076 /prefetch:8
                                    2⤵
                                      PID:4812
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4400,i,6353433847758007435,17395945157159270831,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4420 /prefetch:1
                                      2⤵
                                        PID:5104
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4388,i,11133601404486956272,2707773898089639659,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4272 /prefetch:1
                                        2⤵
                                          PID:440
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4408,i,12627843435348796010,6429550268527910326,262144 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4424 /prefetch:8
                                          2⤵
                                          • Suspicious behavior: EnumeratesProcesses
                                          PID:4292
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3364,i,17652046584847543071,285644429173448457,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5092 /prefetch:1
                                          2⤵
                                            PID:1860
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=4404,i,7988868408702138510,12388721565812439298,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4844 /prefetch:1
                                            2⤵
                                              PID:2408
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5380,i,10771955352778334959,15893944279478174768,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6048 /prefetch:1
                                              2⤵
                                                PID:4712
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=1168,i,449086129198764124,12905543783486068571,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3340 /prefetch:1
                                                2⤵
                                                  PID:4004
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6112,i,13972263136129746330,97849053431413351,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4364 /prefetch:1
                                                  2⤵
                                                    PID:1736
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6184,i,8957897933451305956,13046284886800860443,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4428 /prefetch:1
                                                    2⤵
                                                      PID:2004
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=5136,i,13154943734350456075,16967518554037677493,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5968 /prefetch:1
                                                      2⤵
                                                        PID:720
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=4792,i,1099415723702076855,5411177224109564537,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5728 /prefetch:1
                                                        2⤵
                                                          PID:1636
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5956,i,3540352245352373521,18345932778240264773,524288 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4372 /prefetch:8
                                                          2⤵
                                                            PID:312
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6220,i,18366205362009262746,17908847515675847037,524288 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6228 /prefetch:8
                                                            2⤵
                                                              PID:1536
                                                            • C:\Users\Admin\Downloads\ByteBreaker V1_80031870.exe
                                                              "C:\Users\Admin\Downloads\ByteBreaker V1_80031870.exe"
                                                              2⤵
                                                              • Downloads MZ/PE file
                                                              • Checks computer location settings
                                                              • Executes dropped EXE
                                                              • Drops file in Program Files directory
                                                              • Modifies registry class
                                                              • Suspicious use of SetWindowsHookEx
                                                              PID:6064
                                                              • C:\Users\Admin\AppData\Local\OperaGX_80031870.exe
                                                                C:\Users\Admin\AppData\Local\OperaGX_80031870.exe --silent --allusers=0
                                                                3⤵
                                                                • Executes dropped EXE
                                                                • System Location Discovery: System Language Discovery
                                                                • Suspicious use of SetWindowsHookEx
                                                                PID:5540
                                                                • C:\Users\Admin\AppData\Local\Temp\7zS4A572E0C\installer.exe
                                                                  C:\Users\Admin\AppData\Local\Temp\7zS4A572E0C\installer.exe --silent --allusers=0 --server-tracking-blob=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
                                                                  4⤵
                                                                  • Downloads MZ/PE file
                                                                  • Executes dropped EXE
                                                                  • Enumerates connected drives
                                                                  • Modifies system certificate store
                                                                  • Suspicious use of SetWindowsHookEx
                                                                  PID:5704
                                                                  • C:\Users\Admin\AppData\Local\Temp\7zS4A572E0C\installer.exe
                                                                    C:\Users\Admin\AppData\Local\Temp\7zS4A572E0C\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff73bbd1608,0x7ff73bbd1618,0x7ff73bbd1628
                                                                    5⤵
                                                                    • Executes dropped EXE
                                                                    • Suspicious use of SetWindowsHookEx
                                                                    PID:5748
                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\installer.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\installer.exe" --version
                                                                    5⤵
                                                                    • Executes dropped EXE
                                                                    • Suspicious use of SetWindowsHookEx
                                                                    PID:5596
                                                                  • C:\Users\Admin\AppData\Local\Temp\7zS4A572E0C\installer.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\7zS4A572E0C\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=5704 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_20260907175949" --session-guid=5b1cb8b7-e452-4050-a2d6-f5fd4154a6a3 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=7008000000000000
                                                                    5⤵
                                                                    • Executes dropped EXE
                                                                    • Enumerates connected drives
                                                                    • Enumerates system info in registry
                                                                    • Suspicious use of SetWindowsHookEx
                                                                    PID:1532
                                                                    • C:\Users\Admin\AppData\Local\Temp\7zS4A572E0C\installer.exe
                                                                      C:\Users\Admin\AppData\Local\Temp\7zS4A572E0C\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x280,0x284,0x294,0x25c,0x298,0x7ff73bbd1608,0x7ff73bbd1618,0x7ff73bbd1628
                                                                      6⤵
                                                                      • Executes dropped EXE
                                                                      • Suspicious use of SetWindowsHookEx
                                                                      PID:5188
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe" --backend --initial-pid=5704 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491" --session-guid=5b1cb8b7-e452-4050-a2d6-f5fd4154a6a3 --server-tracking-blob=ZjUzMDA3ZTViMmM2Y2FjYzI0NmFmY2ZiOWM5YmRkMmM5YzIwZDNjYzJmMGZjNDk0YWMwNTY2ZWMyODBhOTY1ZDp7ImNvdW50cnkiOiJHQiIsImVkaXRpb24iOiJzdGQtMiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhX2d4In0sInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yP3V0bV9zb3VyY2U9UFdOZ2FtZXMmdXRtX21lZGl1bT1wYSZ1dG1fY2FtcGFpZ249UFdOX0dCX1BCNV85NDE2XzM1NzUmdXRtX2lkPWUwNTYxN2E5OTliMDQ2ODFhMWZmOWVlNGQ3MDUyMDY2Iiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTAiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzg4ODAwMzg3LjYwNTgiLCJ1c2VyYWdlbnQiOiJNb3ppbGxhLzQuMCAoY29tcGF0aWJsZTsgTVNJRSA3LjA7IFdpbmRvd3MgTlQgNi4yOyBXaW42NDsgeDY0OyBUcmlkZW50LzcuMDsgLk5FVDQuMEM7IC5ORVQ0LjBFOyAuTkVUIENMUiAyLjAuNTA3Mjc7IC5ORVQgQ0xSIDMuMC4zMDcyOTsgLk5FVCBDTFIgMy41LjMwNzI5KSIsInV0bSI6eyJjYW1wYWlnbiI6IlBXTl9HQl9QQjVfOTQxNl8zNTc1IiwiaWQiOiJlMDU2MTdhOTk5YjA0NjgxYTFmZjllZTRkNzA1MjA2NiIsIm1lZGl1bSI6InBhIiwic291cmNlIjoiUFdOZ2FtZXMifSwidXVpZCI6ImU3OTgxZWJkLTA2NmUtNDdhNC04MmNiLTc0ZmJhYjI0ODM1MiJ9 --silent --desktopshortcut=1 --install-subfolder=135.0.5973.94
                                                                      6⤵
                                                                      • Executes dropped EXE
                                                                      • Enumerates connected drives
                                                                      • Enumerates system info in registry
                                                                      • Modifies registry class
                                                                      • Suspicious use of FindShellTrayWindow
                                                                      • Suspicious use of SendNotifyMessage
                                                                      • Suspicious use of SetWindowsHookEx
                                                                      PID:392
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x298,0x29c,0x2a0,0x26c,0x2a4,0x7ff65c061608,0x7ff65c061618,0x7ff65c061628
                                                                        7⤵
                                                                        • Executes dropped EXE
                                                                        • Suspicious use of SetWindowsHookEx
                                                                        PID:1228
                                                                      • C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\assistant\assistant_installer.exe
                                                                        "C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                                                                        7⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        • Adds Run key to start application
                                                                        • System Location Discovery: System Language Discovery
                                                                        • Enumerates system info in registry
                                                                        • Modifies Internet Explorer settings
                                                                        PID:6084
                                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\assistant\assistant_installer.exe
                                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x240,0x244,0x248,0x21c,0x24c,0xe0cb80,0xe0cb8c,0xe0cb98
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • System Location Discovery: System Language Discovery
                                                                          PID:5760
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • System Location Discovery: System Language Discovery
                                                                          • Enumerates system info in registry
                                                                          PID:5312
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0xf2cb80,0xf2cb8c,0xf2cb98
                                                                            9⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • System Location Discovery: System Language Discovery
                                                                            PID:3324
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                                                                            9⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • System Location Discovery: System Language Discovery
                                                                            • Enumerates system info in registry
                                                                            • Suspicious use of FindShellTrayWindow
                                                                            • Suspicious use of SendNotifyMessage
                                                                            PID:5512
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                              10⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              • Enumerates system info in registry
                                                                              PID:848
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x198,0x19c,0x1a0,0x194,0x1a4,0x7ffa858ae330,0x7ffa858ae340,0x7ffa858ae350
                                                                                11⤵
                                                                                • Executes dropped EXE
                                                                                PID:452
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                              10⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              PID:5652
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x1a4,0x1a8,0x1ac,0x1a0,0x1b0,0x7ffa858ae330,0x7ffa858ae340,0x7ffa858ae350
                                                                                11⤵
                                                                                • Executes dropped EXE
                                                                                PID:2144
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x27c,0x280,0x284,0x240,0x288,0xe7e2bc,0xe7e2c8,0xe7e2d4
                                                                              10⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              • System Location Discovery: System Language Discovery
                                                                              PID:3952
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                11⤵
                                                                                • Executes dropped EXE
                                                                                • Loads dropped DLL
                                                                                PID:2944
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x184,0x188,0x18c,0x180,0x190,0x7ffa858ae330,0x7ffa858ae340,0x7ffa858ae350
                                                                                  12⤵
                                                                                  • Executes dropped EXE
                                                                                  PID:5460
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                11⤵
                                                                                • Executes dropped EXE
                                                                                • Loads dropped DLL
                                                                                • Enumerates system info in registry
                                                                                PID:5700
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x148,0x14c,0x154,0x118,0x150,0x7ffa858ae330,0x7ffa858ae340,0x7ffa858ae350
                                                                                  12⤵
                                                                                  • Executes dropped EXE
                                                                                  PID:2700
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                11⤵
                                                                                • Executes dropped EXE
                                                                                • Loads dropped DLL
                                                                                • Enumerates system info in registry
                                                                                PID:980
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x174,0x178,0x170,0x140,0x16c,0x7ffa858ae330,0x7ffa858ae340,0x7ffa858ae350
                                                                                  12⤵
                                                                                  • Executes dropped EXE
                                                                                  PID:3932
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                                                                        7⤵
                                                                        • Checks computer location settings
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        • Adds Run key to start application
                                                                        • Checks processor information in registry
                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                        • Suspicious use of FindShellTrayWindow
                                                                        • Suspicious use of SendNotifyMessage
                                                                        PID:5604
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x174,0x178,0x170,0x140,0x16c,0x7ffa858ae330,0x7ffa858ae340,0x7ffa858ae350
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          PID:5712
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1748,i,11749007975342726762,18270864132636702694,262144 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1808 /prefetch:2
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          PID:3588
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=2132,i,8605062670096781418,14840729304972708763,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2144 /prefetch:3
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • System Time Discovery
                                                                          • Enumerates system info in registry
                                                                          PID:2204
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=2416,i,3369223161888779022,16539876543423406370,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2424 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          PID:5680
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3396,i,18329020649241924408,5555389165627465335,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3308 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • Enumerates system info in registry
                                                                          PID:6192
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3336,i,3650454876011899700,6208464714907251236,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3360 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          PID:6200
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3328,i,9922988238163266837,14073607487145989197,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3448 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • Enumerates system info in registry
                                                                          PID:6208
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3300,i,4434285639748396483,16963483457912786471,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3492 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          PID:6216
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3432,i,9949977747675230973,11523095639586199169,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3512 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          PID:6224
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3460,i,6727362026277346483,827461068328506427,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3548 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          PID:6248
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4112,i,8275056781874909436,6644845815396407840,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4132 /prefetch:1
                                                                          8⤵
                                                                          • Checks computer location settings
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          PID:6272
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_gx_splash.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          PID:6968
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4636,i,16990604516386268822,1674200728472834637,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4648 /prefetch:1
                                                                          8⤵
                                                                          • Checks computer location settings
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          PID:7056
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4824,i,5983094138313766890,5117383021214786927,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4828 /prefetch:2
                                                                          8⤵
                                                                          • Checks computer location settings
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          PID:7124
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4852,i,6645808493854737416,11723790545071958234,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4996 /prefetch:1
                                                                          8⤵
                                                                          • Checks computer location settings
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • Enumerates system info in registry
                                                                          PID:3388
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5236,i,1054575019482215587,5765535811462229511,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5216 /prefetch:1
                                                                          8⤵
                                                                          • Checks computer location settings
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          PID:4144
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5352,i,12056519160359083175,13206241024720960825,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=4944 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • Enumerates system info in registry
                                                                          PID:6240
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5356,i,4140799907169776927,14379919664856702450,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5372 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Enumerates system info in registry
                                                                          PID:4752
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5360,i,13342731199145198608,4342345579828610919,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5380 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Enumerates system info in registry
                                                                          PID:1504
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5364,i,7560357959156289372,13755778713791079739,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5496 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Enumerates system info in registry
                                                                          PID:6232
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6336,i,10314936139681432708,9029746234954153669,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6340 /prefetch:2
                                                                          8⤵
                                                                          • Checks computer location settings
                                                                          • Executes dropped EXE
                                                                          PID:6608
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5488,i,13138994373867761665,5876029546597236319,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6640 /prefetch:2
                                                                          8⤵
                                                                          • Checks computer location settings
                                                                          • Executes dropped EXE
                                                                          • Enumerates system info in registry
                                                                          PID:6500
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6856,i,17055320788923986477,12211681223322392270,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6868 /prefetch:2
                                                                          8⤵
                                                                          • Checks computer location settings
                                                                          • Executes dropped EXE
                                                                          • Enumerates system info in registry
                                                                          PID:5784
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6484,i,817236259138894208,10067954491154365286,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6976 /prefetch:1
                                                                          8⤵
                                                                          • Checks computer location settings
                                                                          • Executes dropped EXE
                                                                          • Enumerates system info in registry
                                                                          PID:7272
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=6500,i,14040180579162431432,17605877478843256812,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6600 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Enumerates system info in registry
                                                                          PID:7424
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7308,i,16217851686763679098,5161500473368724685,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7340 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          PID:8076
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7332,i,6502930172178920852,10894711792221659869,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7384 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          PID:8084
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7372,i,11709944004509957846,2875942286779559758,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7440 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          PID:8104
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7356,i,10604889614750482745,18060545709845877669,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7404 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          PID:8096
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7912,i,2079834975408923503,1462707407675671409,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7924 /prefetch:8
                                                                          8⤵
                                                                          • Executes dropped EXE
                                                                          • Enumerates system info in registry
                                                                          PID:8124
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7320,i,1333041373513937586,489328237908968070,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8032 /prefetch:8
                                                                          8⤵
                                                                          • Enumerates system info in registry
                                                                          PID:8136
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8196,i,14961538824879780803,16004515368463135442,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8240 /prefetch:8
                                                                          8⤵
                                                                          • Enumerates system info in registry
                                                                          PID:8156
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8224,i,1556322460865419634,17332858221664980426,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8280 /prefetch:8
                                                                          8⤵
                                                                          • Enumerates system info in registry
                                                                          PID:8168
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8208,i,1256469457513394046,18056092288485668727,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8232 /prefetch:8
                                                                          8⤵
                                                                            PID:8164
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8260,i,3858897333031007956,10291816768613215358,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8300 /prefetch:8
                                                                            8⤵
                                                                              PID:8180
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8804,i,13797370226513368437,11065786630727494954,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8776 /prefetch:8
                                                                              8⤵
                                                                              • Enumerates system info in registry
                                                                              PID:6600
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=9024,i,8433159771012012912,17521191161648896543,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9000 /prefetch:8
                                                                              8⤵
                                                                                PID:7304
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9156,i,14676969639258156179,8658243496809645375,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9172 /prefetch:2
                                                                                8⤵
                                                                                • Checks computer location settings
                                                                                PID:8100
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3912,i,4023053427556981674,14741928528745526085,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=4256 /prefetch:8
                                                                                8⤵
                                                                                  PID:7780
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5840,i,12877425160829200952,10917838243737889399,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9968 /prefetch:8
                                                                                  8⤵
                                                                                    PID:7768
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe" --fix-taskbar-pins
                                                                                    8⤵
                                                                                      PID:7928
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x280,0x284,0x288,0x230,0x28c,0x7ff65c061608,0x7ff65c061618,0x7ff65c061628
                                                                                        9⤵
                                                                                          PID:6316
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                                                                                        8⤵
                                                                                          PID:7812
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff77954c278,0x7ff77954c288,0x7ff77954c298
                                                                                            9⤵
                                                                                              PID:7984
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=10144,i,10869045769992463653,8694649173380386605,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10148 /prefetch:8
                                                                                            8⤵
                                                                                              PID:7804
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5620,i,149645557204514290,17320450929445495938,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10164 /prefetch:8
                                                                                              8⤵
                                                                                              • Enumerates system info in registry
                                                                                              PID:7908
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=10448,i,3966814439531230935,16219865207978012710,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10456 /prefetch:8
                                                                                              8⤵
                                                                                                PID:1796
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=10600,i,10277323568695147977,690513486920496359,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10636 /prefetch:1
                                                                                                8⤵
                                                                                                • Checks computer location settings
                                                                                                PID:5404
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=4244,i,2599953198984981365,17589031834990397320,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=4212 /prefetch:8
                                                                                                8⤵
                                                                                                  PID:6368
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=4200,i,17806683610456416929,13158213903535469595,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=3720 /prefetch:8
                                                                                                  8⤵
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:6380
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=10620,i,1639044489043759098,16783315039883371905,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=10772 /prefetch:8
                                                                                                  8⤵
                                                                                                  • Enumerates system info in registry
                                                                                                  PID:6972
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5676,i,8695747307929314471,14140323704660213742,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=3444 /prefetch:8
                                                                                                  8⤵
                                                                                                    PID:5560
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=10756,i,1192784308270615918,15153272039518840044,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=3648 /prefetch:8
                                                                                                    8⤵
                                                                                                      PID:5520
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5732,i,9255304142790365906,15090901998255694592,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=7716 /prefetch:8
                                                                                                      8⤵
                                                                                                      • Enumerates system info in registry
                                                                                                      PID:6908
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=4080,i,16772111453308041985,8561054916235944023,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=4052 /prefetch:8
                                                                                                      8⤵
                                                                                                      • Enumerates system info in registry
                                                                                                      PID:6248
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8308,i,12006571610733201323,2160441473231951400,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=8768 /prefetch:8
                                                                                                      8⤵
                                                                                                        PID:8048
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8756,i,9337584870429685246,3198348726098399242,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=10292 /prefetch:8
                                                                                                        8⤵
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:6260
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=4076,i,2524605360542464651,17186071410185391129,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8312 /prefetch:8
                                                                                                        8⤵
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:7600
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7608,i,13534144087459505374,4644104056099098415,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=7408 /prefetch:8
                                                                                                        8⤵
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:8072
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8056,i,928968657834500320,16024906611816440591,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=7796 /prefetch:8
                                                                                                        8⤵
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:7916
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=7776,i,7672980909482630761,5922356325164346010,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=9120 /prefetch:2
                                                                                                        8⤵
                                                                                                        • Checks computer location settings
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:6348
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7620,i,6377788651012771964,14464809354448085587,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=3700 /prefetch:8
                                                                                                        8⤵
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:7824
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=8424,i,11591607101128385332,12458160995556966673,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=4060 /prefetch:2
                                                                                                        8⤵
                                                                                                        • Checks computer location settings
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:7616
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8292,i,17225108852902580592,1999858793175001569,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=10200 /prefetch:8
                                                                                                        8⤵
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:7640
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=9012,i,648109961938691329,18316896653789608054,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=5380 /prefetch:8
                                                                                                        8⤵
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:7564
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8416,i,5689960599698866226,10473713655550175189,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=5840 /prefetch:8
                                                                                                        8⤵
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:6344
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=8212,i,12086328445079204090,17552608348514565577,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=8288 /prefetch:2
                                                                                                        8⤵
                                                                                                        • Checks computer location settings
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:6972
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7932,i,4856071402602621346,1185245680776103725,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=10400 /prefetch:2
                                                                                                        8⤵
                                                                                                        • Checks computer location settings
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:6612
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=7676,i,10603258274415030245,11449723986081598204,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=10560 /prefetch:2
                                                                                                        8⤵
                                                                                                        • Checks computer location settings
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:2080
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3776,i,10632455288326041843,15512942916571429237,524288 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=8416 /prefetch:8
                                                                                                        8⤵
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:8908
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=5768,i,15113440201345481300,12257393361441696264,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=5660 /prefetch:2
                                                                                                        8⤵
                                                                                                        • Checks computer location settings
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:9124
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=9956,i,13872640339121171882,13759519209964093689,2097152 --field-trial-handle=1812,i,4822295030137090515,4446955565893246811,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,17910008325048708186,15922698942459560886,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=6900 /prefetch:2
                                                                                                        8⤵
                                                                                                        • Checks computer location settings
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:8104
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --edition=std-2 --host=https://autoupdate.opera.com/ --installationdatadir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --installdir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --lang=en-US --pipeid --producttype --requesttype=shutdown --version=135.0.5973.94 --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --firstrunver=135.0.5973.94 --firstrunts=1788800433 --consent-info=eyJzdGF0aXN0aWNzX2NvbGxlY3Rpb25fZW5hYmxlZCI6dHJ1ZSwidXNlcl9leHBlcmllbmNlX21ldHJpY3NfcmVwb3J0aW5nX2VuYWJsZWQiOnRydWV9
                                                                                                        8⤵
                                                                                                          PID:8852
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x298,0x29c,0x2a0,0x294,0x2a4,0x7ff77954c278,0x7ff77954c288,0x7ff77954c298
                                                                                                            9⤵
                                                                                                              PID:7704
                                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\assistant\Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\assistant\Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe"
                                                                                                      5⤵
                                                                                                      • Executes dropped EXE
                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                      PID:6072
                                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\assistant\assistant_installer.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\assistant\assistant_installer.exe" --version
                                                                                                      5⤵
                                                                                                      • Executes dropped EXE
                                                                                                      • Loads dropped DLL
                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                      • Enumerates system info in registry
                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                      PID:5364
                                                                                                      • C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\assistant\assistant_installer.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0xe0cb80,0xe0cb8c,0xe0cb98
                                                                                                        6⤵
                                                                                                        • Executes dropped EXE
                                                                                                        • Loads dropped DLL
                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                        PID:5320
                                                                                                • C:\Program Files\Booster\GameBooster.exe
                                                                                                  "C:\Program Files\Booster\GameBooster.exe" install
                                                                                                  3⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Drops file in Program Files directory
                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                  PID:5588
                                                                                                  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                    powershell.exe -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\GameBooster_CreateStartupTask.ps1"
                                                                                                    4⤵
                                                                                                    • Command and Scripting Interpreter: PowerShell
                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                    PID:5676
                                                                                                • C:\Windows\system32\NOTEPAD.EXE
                                                                                                  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                                                                                  3⤵
                                                                                                  • Opens file in notepad (likely ransom note)
                                                                                                  PID:2760
                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6452,i,11522891552508705922,1715833804762616445,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5492 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:7280
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6544,i,13997023018998429153,11387591286433425253,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6552 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:7408
                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6716,i,1327552514111391367,9826469032315122624,2097152 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6732 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:8416
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6680,i,7775663476723358921,14384940854882009236,524288 --field-trial-handle=2036,i,5599200755513581780,844464310341545566,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6908 /prefetch:8
                                                                                                      2⤵
                                                                                                        PID:8300
                                                                                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                      1⤵
                                                                                                        PID:2500
                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                        1⤵
                                                                                                          PID:4736
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault12270515h0530h435fh9246h73f0dbd1694e
                                                                                                          1⤵
                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                          PID:5000
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault12270515h0530h435fh9246h73f0dbd1694e --edge-skip-compat-layer-relaunch
                                                                                                            2⤵
                                                                                                            • Enumerates system info in registry
                                                                                                            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                            • Suspicious use of WriteProcessMemory
                                                                                                            PID:2924
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x25c,0x7ffaa392c188,0x7ffaa392c194,0x7ffaa392c1a0
                                                                                                              3⤵
                                                                                                                PID:2284
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,6914540522236231938,7082669436775220552,262144 --field-trial-handle=2320,i,17666010265571002219,9825526356342935376,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
                                                                                                                3⤵
                                                                                                                  PID:3920
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,10020403861999831577,13151472014793027345,524288 --field-trial-handle=2320,i,17666010265571002219,9825526356342935376,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:3
                                                                                                                  3⤵
                                                                                                                  • System Time Discovery
                                                                                                                  PID:3828
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2440,i,13881580836999657349,12569749236484300384,524288 --field-trial-handle=2320,i,17666010265571002219,9825526356342935376,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
                                                                                                                  3⤵
                                                                                                                    PID:5128
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3664,i,8038525335594141622,3468720509552790583,2097152 --field-trial-handle=2320,i,17666010265571002219,9825526356342935376,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:2
                                                                                                                    3⤵
                                                                                                                      PID:5188
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                  1⤵
                                                                                                                    PID:452
                                                                                                                  • C:\Program Files\Booster\GameBooster.exe
                                                                                                                    "C:\Program Files\Booster\GameBooster.exe"
                                                                                                                    1⤵
                                                                                                                    • Executes dropped EXE
                                                                                                                    • Loads dropped DLL
                                                                                                                    • Modifies data under HKEY_USERS
                                                                                                                    PID:5280
                                                                                                                    • C:\Program Files\Booster\GameBooster.exe
                                                                                                                      "C:\Program Files\Booster\GameBooster.exe" --minimized
                                                                                                                      2⤵
                                                                                                                      • Executes dropped EXE
                                                                                                                      • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                      • Suspicious use of FindShellTrayWindow
                                                                                                                      • Suspicious use of SendNotifyMessage
                                                                                                                      PID:2932
                                                                                                                  • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                    C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                    1⤵
                                                                                                                      PID:2916
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                                                                                      1⤵
                                                                                                                      • Executes dropped EXE
                                                                                                                      • Loads dropped DLL
                                                                                                                      PID:6852
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x168,0x16c,0x170,0x164,0x174,0x7ffa858ae330,0x7ffa858ae340,0x7ffa858ae350
                                                                                                                        2⤵
                                                                                                                        • Executes dropped EXE
                                                                                                                        PID:6868
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                                                                                      1⤵
                                                                                                                        PID:7700
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff77954c278,0x7ff77954c288,0x7ff77954c298
                                                                                                                          2⤵
                                                                                                                            PID:7728
                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
                                                                                                                            2⤵
                                                                                                                              PID:9120
                                                                                                                          • C:\Windows\System32\rundll32.exe
                                                                                                                            C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                            1⤵
                                                                                                                              PID:8556
                                                                                                                            • C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe
                                                                                                                              "C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe"
                                                                                                                              1⤵
                                                                                                                              • Identifies VirtualBox via ACPI registry values (likely anti-VM)
                                                                                                                              • Downloads MZ/PE file
                                                                                                                              • Checks BIOS information in registry
                                                                                                                              • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                              PID:8956
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.com/invite/qfyfqMnBYK
                                                                                                                                2⤵
                                                                                                                                  PID:9144
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://discord.com/invite/qfyfqMnBYK
                                                                                                                                    3⤵
                                                                                                                                    • Drops file in Program Files directory
                                                                                                                                    • Checks processor information in registry
                                                                                                                                    • Enumerates system info in registry
                                                                                                                                    • Modifies data under HKEY_USERS
                                                                                                                                    • Modifies registry class
                                                                                                                                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                    PID:7572
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x244,0x7ffaa392c188,0x7ffaa392c194,0x7ffaa392c1a0
                                                                                                                                      4⤵
                                                                                                                                        PID:9164
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,7032810946723815948,7679984842298417327,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
                                                                                                                                        4⤵
                                                                                                                                        • System Time Discovery
                                                                                                                                        PID:4752
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,14707520724483628780,1076638511559610479,262144 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
                                                                                                                                        4⤵
                                                                                                                                          PID:5232
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,12987194099057262805,5744555233596614321,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:8
                                                                                                                                          4⤵
                                                                                                                                            PID:5400
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,7959732890895349187,5997699380500254883,2097152 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
                                                                                                                                            4⤵
                                                                                                                                              PID:7364
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,1866335300792294742,5539807986256390800,2097152 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
                                                                                                                                              4⤵
                                                                                                                                                PID:7376
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4884,i,9849024773665217430,12557031581472741775,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:8
                                                                                                                                                4⤵
                                                                                                                                                  PID:6460
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,16747770876728630361,8650305594792536359,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
                                                                                                                                                  4⤵
                                                                                                                                                    PID:7912
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5268,i,732285643203260461,13833431411824938634,2097152 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:1
                                                                                                                                                    4⤵
                                                                                                                                                      PID:5880
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,12255885931967144065,12973466784584449029,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:8
                                                                                                                                                      4⤵
                                                                                                                                                        PID:7816
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,10311961870559913556,16073705837260214901,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:8
                                                                                                                                                        4⤵
                                                                                                                                                        • Modifies registry class
                                                                                                                                                        PID:7144
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,15242065914998600798,4117438840950412407,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
                                                                                                                                                        4⤵
                                                                                                                                                          PID:6152
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,17668095950200717898,13158266129117592164,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
                                                                                                                                                          4⤵
                                                                                                                                                            PID:5640
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,6683702175036715706,2234038293851436683,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
                                                                                                                                                            4⤵
                                                                                                                                                              PID:8080
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,6683702175036715706,2234038293851436683,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
                                                                                                                                                              4⤵
                                                                                                                                                                PID:9124
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6428,i,16061016193281849021,9807698254473367206,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:8
                                                                                                                                                                4⤵
                                                                                                                                                                  PID:1336
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,5641878071874051524,4469107504228062712,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:8
                                                                                                                                                                  4⤵
                                                                                                                                                                    PID:5520
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5772,i,10762292258074742351,8067811521169581335,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:8
                                                                                                                                                                    4⤵
                                                                                                                                                                      PID:5172
                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,7196945320811416337,13769212560664420282,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:8
                                                                                                                                                                      4⤵
                                                                                                                                                                        PID:6112
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,2842935485498938197,7848360064568186571,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:8
                                                                                                                                                                        4⤵
                                                                                                                                                                          PID:5496
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,6790298511462163244,3789551867465706207,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:8
                                                                                                                                                                          4⤵
                                                                                                                                                                            PID:5432
                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6312,i,14640537182529529066,14758566992720733395,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
                                                                                                                                                                            4⤵
                                                                                                                                                                              PID:7248
                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6320,i,6502665594234887386,6261271321087891157,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
                                                                                                                                                                              4⤵
                                                                                                                                                                                PID:6376
                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,12029600634751304131,3713956335195282307,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
                                                                                                                                                                                4⤵
                                                                                                                                                                                  PID:5556
                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4916,i,1310484214080506414,4510681764096289399,524288 --field-trial-handle=2284,i,6320790015550428292,9573599214457513954,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:8
                                                                                                                                                                                  4⤵
                                                                                                                                                                                    PID:7732
                                                                                                                                                                              • C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\decompiler.exe
                                                                                                                                                                                "C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\decompiler.exe" serve
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:8228
                                                                                                                                                                                • C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\decompiler.exe
                                                                                                                                                                                  "C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\decompiler.exe" serve
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:7348
                                                                                                                                                                                  • C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\decompiler.exe
                                                                                                                                                                                    "C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\decompiler.exe" serve
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:8180
                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=bytebreakerV1.exe --webview-exe-version=1.0.0.0 --user-data-dir="C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=8956.6008.165189605963474668
                                                                                                                                                                                      2⤵
                                                                                                                                                                                      • Enumerates system info in registry
                                                                                                                                                                                      • Modifies data under HKEY_USERS
                                                                                                                                                                                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                                                                      PID:2344
                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x178,0x17c,0x180,0x154,0x188,0x7ffa700db078,0x7ffa700db084,0x7ffa700db090
                                                                                                                                                                                        3⤵
                                                                                                                                                                                          PID:7696
                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.WebView2\EBWebView" --webview-exe-name=bytebreakerV1.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1744,i,5680553443828804511,1859404616368832340,262144 --variations-seed-version --mojo-platform-channel-handle=1740 /prefetch:2
                                                                                                                                                                                          3⤵
                                                                                                                                                                                            PID:7028
                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.WebView2\EBWebView" --webview-exe-name=bytebreakerV1.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2068,i,5680553443828804511,1859404616368832340,262144 --variations-seed-version --mojo-platform-channel-handle=2072 /prefetch:3
                                                                                                                                                                                            3⤵
                                                                                                                                                                                              PID:6840
                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.WebView2\EBWebView" --webview-exe-name=bytebreakerV1.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2360,i,5680553443828804511,1859404616368832340,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:8
                                                                                                                                                                                              3⤵
                                                                                                                                                                                                PID:6936
                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.WebView2\EBWebView" --webview-exe-name=bytebreakerV1.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3584,i,5680553443828804511,1859404616368832340,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
                                                                                                                                                                                                3⤵
                                                                                                                                                                                                  PID:8560
                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                              1⤵
                                                                                                                                                                                                PID:4688

                                                                                                                                                                                              Network

                                                                                                                                                                                                    MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                    Reconnaissance

                                                                                                                                                                                                    Resource Development

                                                                                                                                                                                                    Initial Access

                                                                                                                                                                                                    Execution

                                                                                                                                                                                                    Command and Scripting Interpreter

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1059

                                                                                                                                                                                                    PowerShell

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1059.001

                                                                                                                                                                                                    Persistence

                                                                                                                                                                                                    Boot or Logon Autostart Execution

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1547

                                                                                                                                                                                                    Registry Run Keys / Startup Folder

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1547.001

                                                                                                                                                                                                    Event Triggered Execution

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1546

                                                                                                                                                                                                    Component Object Model Hijacking

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1546.015

                                                                                                                                                                                                    Privilege Escalation

                                                                                                                                                                                                    Boot or Logon Autostart Execution

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1547

                                                                                                                                                                                                    Registry Run Keys / Startup Folder

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1547.001

                                                                                                                                                                                                    Event Triggered Execution

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1546

                                                                                                                                                                                                    Component Object Model Hijacking

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1546.015

                                                                                                                                                                                                    Defense Evasion

                                                                                                                                                                                                    Modify Registry

                                                                                                                                                                                                    3
                                                                                                                                                                                                    T1112

                                                                                                                                                                                                    Subvert Trust Controls

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1553

                                                                                                                                                                                                    Install Root Certificate

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1553.004

                                                                                                                                                                                                    Virtualization/Sandbox Evasion

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1497

                                                                                                                                                                                                    Credential Access

                                                                                                                                                                                                    Credentials from Password Stores

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1555

                                                                                                                                                                                                    Credentials from Web Browsers

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1555.003

                                                                                                                                                                                                    Unsecured Credentials

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1552

                                                                                                                                                                                                    Credentials In Files

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1552.001

                                                                                                                                                                                                    Discovery

                                                                                                                                                                                                    Browser Information Discovery

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1217

                                                                                                                                                                                                    Network Share Discovery

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1135

                                                                                                                                                                                                    Peripheral Device Discovery

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1120

                                                                                                                                                                                                    Query Registry

                                                                                                                                                                                                    8
                                                                                                                                                                                                    T1012

                                                                                                                                                                                                    System Information Discovery

                                                                                                                                                                                                    6
                                                                                                                                                                                                    T1082

                                                                                                                                                                                                    System Location Discovery

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1614

                                                                                                                                                                                                    System Language Discovery

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1614.001

                                                                                                                                                                                                    System Time Discovery

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1124

                                                                                                                                                                                                    Virtualization/Sandbox Evasion

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1497

                                                                                                                                                                                                    Lateral Movement

                                                                                                                                                                                                    Collection

                                                                                                                                                                                                    Data from Local System

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1005

                                                                                                                                                                                                    Command and Control

                                                                                                                                                                                                    Web Service

                                                                                                                                                                                                    1
                                                                                                                                                                                                    T1102

                                                                                                                                                                                                    Exfiltration

                                                                                                                                                                                                    Impact

                                                                                                                                                                                                    Replay Monitor

                                                                                                                                                                                                    Loading Replay Monitor...

                                                                                                                                                                                                    Downloads

                                                                                                                                                                                                    GameBooster.exe
                                                                                                                                                                                                    • Path C:\Program Files\Booster\GameBooster.exe
                                                                                                                                                                                                    • Size 715KB
                                                                                                                                                                                                    • SHA256 3bf07d3bfa2cb446e0bcbe889647a0734ab0255edf6b7290ac4c3e9d2e667fef
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    hgsdk.dll
                                                                                                                                                                                                    • Path C:\Program Files\Booster\hgsdk.dll
                                                                                                                                                                                                    • Size 7.4MB
                                                                                                                                                                                                    • SHA256 2720d215168108700767f8e9b57819d55ca139d69d8d828186da186850a37c6c
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    manifest.json
                                                                                                                                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping7572_852722875\manifest.json
                                                                                                                                                                                                    • Size 43B
                                                                                                                                                                                                    • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                    • Size 6B
                                                                                                                                                                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    BrowsingTopicsState
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                                                                                                    • Size 414B
                                                                                                                                                                                                    • SHA256 78b863093c99c830c43e66c4961d340d0dd876fe9ef61f4ce446fa21f5651e55
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    the-real-index
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 39e1b4d8deb344f55d322fc4753bd61ac6810a4a02eae9318562efb156854636
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    the-real-index
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                    • Size 960B
                                                                                                                                                                                                    • SHA256 7b80d15cbdbba50cf0d8683cd52726f338aa281530432196335f6c5f26cfa19c
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    the-real-index
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 c6dfc4280ca11d875dac00c40f1b345ba5109f54afe39e00f73db99e7ca53e1d
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Network Persistent State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                    • Size 11KB
                                                                                                                                                                                                    • SHA256 044a8cfd75dceb6200174eea8caa4b27ff5ce62dc735a3d52ec3a598f531f086
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Network Persistent State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 8ddf07a5eb8643facc95d7120797a98815f2893da71d2e4ff2d3d648e723e260
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Network Persistent State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                    • Size 13KB
                                                                                                                                                                                                    • SHA256 0f409e7d1f223247c867161387e0df025887f4b13088258609d56d69923921a4
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Network Persistent State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                    • Size 13KB
                                                                                                                                                                                                    • SHA256 a44fcaf01a22594ec99f79aedf3f24eed7153772812811ee3a9f1ea49429f682
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Network Persistent State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                    • Size 13KB
                                                                                                                                                                                                    • SHA256 c860c7f772f75324f6462b59313dc0430911ee8cbebe6d833b7a7791a16b1d62
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    SCT Auditing Pending Reports
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                    • Size 2B
                                                                                                                                                                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                    • Size 15KB
                                                                                                                                                                                                    • SHA256 6ad18eeca3a28bc3d07475785fe19ec5902bb5446cc19609bd0d1369a7b40acd
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                    • Size 13KB
                                                                                                                                                                                                    • SHA256 7452740a5a6903c6c8d816498e1a0f10ca80642e1e331857a9d3f652400b037e
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                    • Size 15KB
                                                                                                                                                                                                    • SHA256 6c817d42d871ec21aee9a4ebd7bb2e157c884fcc7ff3d3e53ceeda1920101197
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                    • Size 14KB
                                                                                                                                                                                                    • SHA256 28802bb45166cd8a84398a8949ee7295a67ab776f59e168b9adf3489b7f4ccca
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                    • Size 14KB
                                                                                                                                                                                                    • SHA256 cf6f6fb285229e582ce71aff4258aab04fea7066c05b20f1f74ee7c523ee5297
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                    • Size 15KB
                                                                                                                                                                                                    • SHA256 137d43d5b62d29acfd62a1a3c5ee6a8e4c9a0bdb7a551961e7ec9a4562c98d84
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                    • Size 15KB
                                                                                                                                                                                                    • SHA256 9c459c75e2c60ce231dcff1ec243e7c244773cb99aa9158a116bdac05af74831
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                    • Size 14KB
                                                                                                                                                                                                    • SHA256 5574e6d77662df01f022283c1381d7d5927b5d5ade9fa4a5a5e268beb2349a46
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                    • Size 15KB
                                                                                                                                                                                                    • SHA256 83572871cc0c8ca2879196391452c5f9cebd2c77f40b48ee00e1fb1417b52dd1
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                    • Size 15KB
                                                                                                                                                                                                    • SHA256 45055d47c410f9e53606f1094b5f3df5fd098681c75eafe100fc4c3cf1d9698e
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Secure Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                    • Size 17KB
                                                                                                                                                                                                    • SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    the-real-index
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                    • Size 120B
                                                                                                                                                                                                    • SHA256 f00a3522595c42246a741333da3958526b987090d18e865fa2d835fa4990194a
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    the-real-index~RFe591553.TMP
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591553.TMP
                                                                                                                                                                                                    • Size 96B
                                                                                                                                                                                                    • SHA256 023a65369e7dce81511ec166a35760fa1b00b62165216e491e7bf6e2b094f0d4
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                    • Size 117KB
                                                                                                                                                                                                    • SHA256 a0dec6ff0bbe8f8b890dd5270af831e3bb61b02c99e0a492865e5c273f9963e2
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                    • Size 116KB
                                                                                                                                                                                                    • SHA256 e88b34bfea11eaf0dc69b7b9821453bc3ca2d8bfcae53356409db629de901d29
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                    • Size 116KB
                                                                                                                                                                                                    • SHA256 aa351a85b12be51391288d77d477963e0bf8552548b91c390d46e812ea612d30
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                    • Size 115KB
                                                                                                                                                                                                    • SHA256 ad00432f3c5209d6af712615203538f6d078689655c703d88b88df395b986df1
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                    • Size 117KB
                                                                                                                                                                                                    • SHA256 92d17c57a44d93c15b7725929b7c7632e7dcb6bad0bb9ade49419d4550823a9b
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                    • Size 116KB
                                                                                                                                                                                                    • SHA256 5c8ded4afd3c661d0269a733d7340eaf1d1cff70b14bcae82492a86ad31bdca6
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                    • Size 117KB
                                                                                                                                                                                                    • SHA256 2fe656c7bd074c38450f6e2e17ac5b0d510f122ebf2337c440c5bbb94ae9ee77
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                    • Size 116KB
                                                                                                                                                                                                    • SHA256 7ed5267d22128d2e485c4f824d5c64223f0061938a50d88a485cca055c08861e
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                    • Size 116KB
                                                                                                                                                                                                    • SHA256 d420696be58b3082bd59cc9e51c7f84fad17c932aa00ee008e8bc054e250dd88
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                    • Size 116KB
                                                                                                                                                                                                    • SHA256 87c99f43f878ac7c2bd6db63455411b129e1b79c26a4cac14bd26d25d2a7cb0c
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    settings.dat
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                    • Size 280B
                                                                                                                                                                                                    • SHA256 7277effa812f1c9b55947560912527fbe808271a519ff1f5a981bb4dd433db70
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    settings.dat
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                    • Size 280B
                                                                                                                                                                                                    • SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    settings.dat
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                    • Size 280B
                                                                                                                                                                                                    • SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    the-real-index
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                    • Size 10KB
                                                                                                                                                                                                    • SHA256 d7d0dc5ea3d8ad5f26d4af23bfc0eaef39ca51bead720c4493ae94da86b492b5
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    SiteList-Enterprise.json
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                                    • Size 2B
                                                                                                                                                                                                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Edge Profile.ico
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                                    • Size 70KB
                                                                                                                                                                                                    • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Network Persistent State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                    • Size 111B
                                                                                                                                                                                                    • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Network Persistent State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 c8148aef7122c958f77d4acc7bb3d96c2ecc15f33c5af2a59d51bd9fda7e9c11
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Network Persistent State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                    • Size 61B
                                                                                                                                                                                                    • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                    • Size 7KB
                                                                                                                                                                                                    • SHA256 b87e44b4161885f7d97f57826eb6d5ed0653f6b0edd255ea3886f33267d0ee7e
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                    • Size 10KB
                                                                                                                                                                                                    • SHA256 86b52c81581e0b123489a6205157a21e7e456d3daa9edb0f0b7e73bf05830e00
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 c0c530e6bc97f77867ee41228872135119f1f14fd1805a2131ed7ae7590cb38c
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 5d64e0e2732c901577632889fd394a51a58c4a93032030930f6dcebe1e1d5357
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Secure Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                    • Size 26KB
                                                                                                                                                                                                    • SHA256 efe21e46bf89bb100f5f9f62b64821d44d2e049360cfdefe63cdfeb3cd88ac07
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    index
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\73f23cd0-d750-482d-8b7a-9cf5387602ef\index
                                                                                                                                                                                                    • Size 24B
                                                                                                                                                                                                    • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    index.txt
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                                                                                                                                                    • Size 233B
                                                                                                                                                                                                    • SHA256 800681aabf8cf23d6b17d0a8f168597e7136e137b03a2230332ee9c41f16f05d
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    index.txt
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                                                                                                                                                    • Size 226B
                                                                                                                                                                                                    • SHA256 7d430d927efdab6ae4668434aec09412ccf49b4e39a39265b8e898ebf9d9b1ce
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    index.txt~RFe5eb9a9.TMP
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5eb9a9.TMP
                                                                                                                                                                                                    • Size 138B
                                                                                                                                                                                                    • SHA256 141b5a200418ef20fb495635c2f43021e050b274cf64985f2b2134de9ad9b3a1
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    sync_diagnostic.log
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                                    • Size 4KB
                                                                                                                                                                                                    • SHA256 a2c4ea847251efaae5966b05cf9f7a445b7e69998454be2c8b3833420a31fad5
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    OperationConfig~RFe5f989f.TMP
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5f989f.TMP
                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                    • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    a4aff4b7-6005-45be-bf20-4211806cc32c.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a4aff4b7-6005-45be-bf20-4211806cc32c.tmp
                                                                                                                                                                                                    • Size 22KB
                                                                                                                                                                                                    • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                    • Size 18KB
                                                                                                                                                                                                    • SHA256 b37505fce4428180afb68251ce0773bcb3d3e77e4fe33e595852a955ac4403b9
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 94c0e60d475946f6d3a60ecb4ebe35822e37acc4057f6f813c0e4179eeeccb10
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 4256fce58d70c545c962fc8d0922b8f3e193a4d3c01008d5391cb70f1f66423c
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 2a446cc23e263b9f7c25226a422003b9fc050118e89176e882b653deaa2bd44f
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                    • Size 24KB
                                                                                                                                                                                                    • SHA256 d6d2c081c72ac8466ac18f4a0d00b05aa75cd3d2c5965d02bdff522b633d7776
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                    • Size 18KB
                                                                                                                                                                                                    • SHA256 2003228f85789b17ad3ae10feee5621cf4cdebe4ef5204da8d4dcbb6822053dd
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 36ab1f96c5cef1ef258790afeb12d500ccfaec74bb384254cc92a64b2f4d08da
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 b5db15bf6e4ecb4e20fe17258aae9d646575e2c0b703dfa94b4923c77fd2e698
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 2fdee2344dc84751ca1ae518985d24a17429cb3092ba427f6ec299b15b760f37
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 151159f75ba00d6329c1bff56f97b6655d6b42b8f5c3b76f80ccf6ec2c85882c
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    OperaGX_80031870.exe
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\OperaGX_80031870.exe
                                                                                                                                                                                                    • Size 3.9MB
                                                                                                                                                                                                    • SHA256 1b23d211d13614f8baaa63cea7b97b23dc69a4bbc6fcbbd886076bad2287b14c
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    custom_partner_content.json
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\resources\custom_partner_content.json
                                                                                                                                                                                                    • Size 245KB
                                                                                                                                                                                                    • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    installer_prefs.json
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 c73c7f70f0aac88d3c0cfc68003888f1bb9b4a6f2e5ee5989cb03500fdf9f3d9
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    opera.exe
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                                                                                    • Size 2.9MB
                                                                                                                                                                                                    • SHA256 63d5fddbaa2f540e9d2bfdbcee2e714dd0b02d4286346bab0a324d03d591decf
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Opera GX Browser.lnk
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\Opera GX Browser.lnk
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 e553ca21a5ba7fdc48ad54edaef9873c154c76a241d2c001dc7bcaea3d53579d
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\assistant\Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe
                                                                                                                                                                                                    • Size 2.8MB
                                                                                                                                                                                                    • SHA256 70f1b1cbe5162fd8842c441779ef4d59de6b182d1448fc6285c6a73ae3033fc4
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    assistant_installer.exe
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\assistant\assistant_installer.exe
                                                                                                                                                                                                    • Size 2.4MB
                                                                                                                                                                                                    • SHA256 c5eef147beda944c8bff63591165b4c49e556d2c45c6ea9b9f1d9e16f180621e
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    dbgcore.dll
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\assistant\dbgcore.dll
                                                                                                                                                                                                    • Size 196KB
                                                                                                                                                                                                    • SHA256 856a7e6aacf1934324f08dc42b4b37cb20886d933cc0c57283c8425f9ebedbdd
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    dbghelp.dll
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\assistant\dbghelp.dll
                                                                                                                                                                                                    • Size 1.8MB
                                                                                                                                                                                                    • SHA256 8f880333398382fea1efa73751f4b16d8204a60cc13aefc8c4223b8086eccd81
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    installer_prefs_include.json
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\installer_prefs_include.json
                                                                                                                                                                                                    • Size 357B
                                                                                                                                                                                                    • SHA256 27e3fcf8745085552b215795b8e01c87866081347a3536674cd2e5a60b66c2d4
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    installer_prefs_include.json
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\installer_prefs_include.json
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 ab9f085c0122cead582193592210515350cfc2645ba18c5d1dcf413dbc5e070e
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    installer_prefs_include.json.backup
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\5be5608b-520a-4389-bee3-9762df8b617f Opera GX Installer Temp\opera_package_202609071759491\installer_prefs_include.json.backup
                                                                                                                                                                                                    • Size 342B
                                                                                                                                                                                                    • SHA256 4aa0a896e894089ed81e4138ad2dc9e5ea07d130eaf20b39d631cebeed4bd8f7
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    installer.exe
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\7zS4A572E0C\installer.exe
                                                                                                                                                                                                    • Size 9.1MB
                                                                                                                                                                                                    • SHA256 106c950add527723510ced4b1f516ab7b75b781a356063cafd578da334fb7553
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    GameBooster_CreateStartupTask.ps1
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\GameBooster_CreateStartupTask.ps1
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 e44dce271422bf943413d99eef29114e49d91571422d58e5710d8df5616669ef
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    GameBooster_log.txt
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\GameBooster_log.txt
                                                                                                                                                                                                    • Size 126B
                                                                                                                                                                                                    • SHA256 9129d88573d3f0c4e9b2490de0fb58aa5a4b6dec6d646c74525abf221e119d66
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    __PSScriptPolicyTest_zva1zkwp.1im.ps1
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_zva1zkwp.1im.ps1
                                                                                                                                                                                                    • Size 60B
                                                                                                                                                                                                    • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    b51384fc-c16c-4978-841a-e884fa900ef3.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\b51384fc-c16c-4978-841a-e884fa900ef3.tmp
                                                                                                                                                                                                    • Size 1B
                                                                                                                                                                                                    • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    dfbac068-d662-4f39-a715-d33609d5f63f.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\dfbac068-d662-4f39-a715-d33609d5f63f.tmp
                                                                                                                                                                                                    • Size 10KB
                                                                                                                                                                                                    • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ba65f2e7-e987-4094-b400-f11666ba6bc3.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5604_140004396\ba65f2e7-e987-4094-b400-f11666ba6bc3.tmp
                                                                                                                                                                                                    • Size 472KB
                                                                                                                                                                                                    • SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    main.js
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5604_1643964338\CRX_INSTALL\main.js
                                                                                                                                                                                                    • Size 46KB
                                                                                                                                                                                                    • SHA256 e1b3123f37dfe988a8a22427e98d06cdf472c23429f6277f68c6eeb1626cd54e
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    c8766ed2-df9e-40d3-98b1-bb0b2f790b56.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5604_1643964338\c8766ed2-df9e-40d3-98b1-bb0b2f790b56.tmp
                                                                                                                                                                                                    • Size 13KB
                                                                                                                                                                                                    • SHA256 35d78e805a910aad7462893e050376f9d18dbc73c592b4742e6ada87eff3f06b
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    36fd9123-5e54-42b5-9f0b-b7ea1af9a8cf.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5604_40886792\36fd9123-5e54-42b5-9f0b-b7ea1af9a8cf.tmp
                                                                                                                                                                                                    • Size 2.6MB
                                                                                                                                                                                                    • SHA256 c56e30ed1b5c6eb1dc7a00355888fc1994939ba8689756fb27b30323514a57cd
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Icon_Light_Neutral.png
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5604_40886792\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    18ec7d95-0bf8-4724-b5ff-edf8ff134ac6.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5604_472257854\18ec7d95-0bf8-4724-b5ff-edf8ff134ac6.tmp
                                                                                                                                                                                                    • Size 1.2MB
                                                                                                                                                                                                    • SHA256 9cc80630179e77c7425346c110a59c7de35b5b000253dd322c7853867fbe3316
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    3ebfaf1c4dcf4f3b0255.ttf
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5604_472257854\CRX_INSTALL\3ebfaf1c4dcf4f3b0255.ttf
                                                                                                                                                                                                    • Size 316KB
                                                                                                                                                                                                    • SHA256 5ae3965ae20c8090af12aeafec6882ef41829397f28f554e89fbabdf9069ea7e
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    background.js
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5604_472257854\CRX_INSTALL\background.js
                                                                                                                                                                                                    • Size 365KB
                                                                                                                                                                                                    • SHA256 5acb8f0a54c6774e0832d8ee9c7fac2dd593b1a74c89c5f4a9ba3f12d878ebcf
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    compact.css
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5604_472257854\CRX_INSTALL\compact.css
                                                                                                                                                                                                    • Size 45KB
                                                                                                                                                                                                    • SHA256 3c2780bae9783d130b42f40e71c62236953960006c7f5358e14a2204a78c17ef
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    compact.html
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5604_472257854\CRX_INSTALL\compact.html
                                                                                                                                                                                                    • Size 921B
                                                                                                                                                                                                    • SHA256 7b55030e6b2aac8c8d561438bb286a14b02b71059722969c7d483c0dc7ef3b07
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    icon-57.png
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5604_472257854\CRX_INSTALL\icons\icon-57.png
                                                                                                                                                                                                    • Size 873B
                                                                                                                                                                                                    • SHA256 8462b976325b85e3fe1140685159792a700d5382f2307d5eb667af10e76d8964
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    favicon_opera_one.png
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5604_932782154\CRX_INSTALL\favicon_opera_one.png
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    d5b07930-d86b-499e-9fb0-c9b807be90b5.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5604_932782154\d5b07930-d86b-499e-9fb0-c9b807be90b5.tmp
                                                                                                                                                                                                    • Size 4.5MB
                                                                                                                                                                                                    • SHA256 a0adcf75c407790bffcac773e97ec98c4ae15791cae3f906d03d1907aaf672ff
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    2d9992d2-5f98-4cb3-8147-d63d2dd89528.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5604_999874843\2d9992d2-5f98-4cb3-8147-d63d2dd89528.tmp
                                                                                                                                                                                                    • Size 46KB
                                                                                                                                                                                                    • SHA256 0443bab24dce89bd68e06dba7f4335db89e70cf99ac92a0919d5df35a2c3cf93
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    f0bbba07-9a70-4659-92aa-ec863b346dc5.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7572_1289334475\f0bbba07-9a70-4659-92aa-ec863b346dc5.tmp
                                                                                                                                                                                                    • Size 154KB
                                                                                                                                                                                                    • SHA256 e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    content_new.js
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7572_790026938\CRX_INSTALL\content_new.js
                                                                                                                                                                                                    • Size 10KB
                                                                                                                                                                                                    • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    fc52aae2a1f49ba6.customDestinations-ms
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fc52aae2a1f49ba6.customDestinations-ms
                                                                                                                                                                                                    • Size 22KB
                                                                                                                                                                                                    • SHA256 8b8d5655da756e81a7d5b400a002621b832401a203e045ff2a025bd156f6e350
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    fc52aae2a1f49ba6.customDestinations-ms
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fc52aae2a1f49ba6.customDestinations-ms
                                                                                                                                                                                                    • Size 22KB
                                                                                                                                                                                                    • SHA256 753a13278494f5eba5bd0a141908d45eb91a1b5abfea8822ce9d4fce21238f67
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    6225f3b0-1989-4924-922e-645b44cea593.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\6225f3b0-1989-4924-922e-645b44cea593.tmp
                                                                                                                                                                                                    • Size 151B
                                                                                                                                                                                                    • SHA256 69c9e6e76849c6684a932e6cd287659d9c54cb3fb219d76810a56f743044e790
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    settings.dat
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                                                                                                                                    • Size 40B
                                                                                                                                                                                                    • SHA256 f14c821ed6a7f4ba1e49d0e191abceddf7a7fb97f8d2413072a18e0c4426e484
                                                                                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    144ce365-dd8d-4b19-bd17-be405b66d436.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\144ce365-dd8d-4b19-bd17-be405b66d436.tmp
                                                                                                                                                                                                    • Size 412B
                                                                                                                                                                                                    • SHA256 e4744db48bc25a64ac9c3879c67fa36b824b1b0cacd1c755ce6b5e8ba0626b29
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    30482827-f7a1-4091-bd9a-49c2674611cb.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\30482827-f7a1-4091-bd9a-49c2674611cb.tmp
                                                                                                                                                                                                    • Size 171B
                                                                                                                                                                                                    • SHA256 264c06161e1cbf5be5b31bc38dd9d6f79163cb99b0419c84b5797f6d23c113f2
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    768ebcb5-dadb-448e-ad31-9b6ea35b5f84.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\768ebcb5-dadb-448e-ad31-9b6ea35b5f84.tmp
                                                                                                                                                                                                    • Size 162KB
                                                                                                                                                                                                    • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    82424cfa-5436-4478-8c40-6077e0495594.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\82424cfa-5436-4478-8c40-6077e0495594.tmp
                                                                                                                                                                                                    • Size 198B
                                                                                                                                                                                                    • SHA256 b59c8f3aa89707b90c171a391c13fddc978289d91a9d3e472d0ff34f7ae70d24
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    the-real-index
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 277d6e46e0c9b9486d59e311b32b8078ff7d7fc333ba81fba57236a838ed5e43
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    the-real-index
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                    • Size 48B
                                                                                                                                                                                                    • SHA256 6f885c18d45b5226d7c6d0e1ca5ad0620797c826ac8347aa73dd23d5c0063bb3
                                                                                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    data_1
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnWebGPUCache\data_1
                                                                                                                                                                                                    • Size 264KB
                                                                                                                                                                                                    • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    MANIFEST-000001
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
                                                                                                                                                                                                    • Size 41B
                                                                                                                                                                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    03627a8b5fe27d055e5c.woff2
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\03627a8b5fe27d055e5c.woff2
                                                                                                                                                                                                    • Size 10KB
                                                                                                                                                                                                    • SHA256 15df7612b2f445f4d18846aed403d0ca0947b3f8dead95d4b167621f5faaba57
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    8cf014c12c3518f736ab.woff2
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\8cf014c12c3518f736ab.woff2
                                                                                                                                                                                                    • Size 21KB
                                                                                                                                                                                                    • SHA256 d92c6cbc1d482cb917c2ccca6da263f9443600d3f4d595a96d924c1682ee9b7b
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    92dcb004dd66a14761da.woff2
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\92dcb004dd66a14761da.woff2
                                                                                                                                                                                                    • Size 26KB
                                                                                                                                                                                                    • SHA256 1c3007b80d1197de7a0014c537d9d6fc4a5b77ed6e2797a10e180600647c4e0c
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    background.css
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\background.css
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 26a4271f156db19b3c304c53ed9f92085219e55d2af2be98f943201e6a88bfee
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    background.js.LICENSE.txt
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\background.js.LICENSE.txt
                                                                                                                                                                                                    • Size 647B
                                                                                                                                                                                                    • SHA256 637c0a6309ca9c03884e1ff6b5f378632b0ef379fc77007ebcba388aabdcbc3d
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    compact.js
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\compact.js
                                                                                                                                                                                                    • Size 651KB
                                                                                                                                                                                                    • SHA256 c68c06bb69e92a56abbab176e80ee8b82c19005f2695f2a86dc33d752c24e02e
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    compact.js.LICENSE.txt
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\compact.js.LICENSE.txt
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 45f709b183c0fdcceff77265ce79cb2533c7ea7f8265b55a919da7b3e26fa45d
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    dd1eb0afa10711830d27.woff2
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\dd1eb0afa10711830d27.woff2
                                                                                                                                                                                                    • Size 17KB
                                                                                                                                                                                                    • SHA256 eba9487840439a0fa53c9be0541c524bb84b590a7af8c86573ceb1fe19c4bda9
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    e62404dc3261fb537f3a.woff2
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\e62404dc3261fb537f3a.woff2
                                                                                                                                                                                                    • Size 45KB
                                                                                                                                                                                                    • SHA256 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    f8ed8c6b512a482bd1ae.woff2
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\f8ed8c6b512a482bd1ae.woff2
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 81f77e5106cfd713c25b5e57dbab6b3faa9a98f92bb0165d15a05e6d474d7758
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    fbd6dc6ea3a2a849b6fc.woff2
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\fbd6dc6ea3a2a849b6fc.woff2
                                                                                                                                                                                                    • Size 78KB
                                                                                                                                                                                                    • SHA256 a2bfd9fe607d28fd07b05046e622818b8b5b94a358d53853a0d3f03e597cdc71
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    icon-512.png
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\icons\icon-512.png
                                                                                                                                                                                                    • Size 10KB
                                                                                                                                                                                                    • SHA256 a63c2f962c8c4460cbdd931262283fa64cb53d01bfcb071c77c8ea453e0d387f
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    icon-57.png
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\icons\icon-57.png
                                                                                                                                                                                                    • Size 863B
                                                                                                                                                                                                    • SHA256 7a1ae78e7cb77b74cbaefa5b92ec32384761499375738898e71bd43f018f3a17
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    manifest.json
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\manifest.json
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 a051c50b18a7c525a3e4b624e391e2d62d69a3d9989c4263e44868d505374be7
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    popup.html
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\popup.html
                                                                                                                                                                                                    • Size 911B
                                                                                                                                                                                                    • SHA256 3d5e32e4d31d360571f83ac7e089572b103a2a501e3dcbc83633cdc4f41b931a
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    popup.js
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\popup.js
                                                                                                                                                                                                    • Size 1.8MB
                                                                                                                                                                                                    • SHA256 532baa11b9d8487aab0263073622ba5c1f6c343545813423ebd71184bd4e1001
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    popup.js.LICENSE.txt
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1653445054\CRX_INSTALL\popup.js.LICENSE.txt
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 f2b383bd56b82c3a6ab2fc7b09bea49edb7636d24daebb62b1dc2ce438222245
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    manifest.json
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir5604_1795577247\CRX_INSTALL\manifest.json
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 260b3142cfc312fac94098f84da9343a08e2a4d2e8e08d0e0fd4688ea261f4f8
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    messages.json
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    background.js
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
                                                                                                                                                                                                    • Size 17KB
                                                                                                                                                                                                    • SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    twitch16.png
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
                                                                                                                                                                                                    • Size 370B
                                                                                                                                                                                                    • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    twitch48.png
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
                                                                                                                                                                                                    • Size 921B
                                                                                                                                                                                                    • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    logo_128.png
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_128.png
                                                                                                                                                                                                    • Size 7KB
                                                                                                                                                                                                    • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    logo_16.png
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_16.png
                                                                                                                                                                                                    • Size 653B
                                                                                                                                                                                                    • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    logo_32.png
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_32.png
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    logo_48.png
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_48.png
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    logo_64.png
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_64.png
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    service-worker-loader.js
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\service-worker-loader.js
                                                                                                                                                                                                    • Size 49B
                                                                                                                                                                                                    • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    favicon_opera_one.png
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\favicon_opera_one.png
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    reader_mode.js
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\reader_mode.js
                                                                                                                                                                                                    • Size 112KB
                                                                                                                                                                                                    • SHA256 dd4d3dfbd760159952c05355fdc4bc738488fe02e0e8dc43704e2095b6c76c1e
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    service_worker.js
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\service_worker.js
                                                                                                                                                                                                    • Size 89KB
                                                                                                                                                                                                    • SHA256 54a79133f29c7d1da2b6cbd5934a8fa8a60bdcfef8c23e449cd04e0ccd2cbf27
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    spotify_frame_interceptor.js
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\spotify_frame_interceptor.js
                                                                                                                                                                                                    • Size 5KB
                                                                                                                                                                                                    • SHA256 442264acc3e319d41ee98a0df10538500eb7914b0be345689340c83cfec1be7d
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    background.js
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.14_0\background.js
                                                                                                                                                                                                    • Size 144KB
                                                                                                                                                                                                    • SHA256 0f770704e2ff8de44b53ed7972b8a3e10f45e6289bfee8cae8cdcddbe7bdd416
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Icon_Light_Neutral.png
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.14_0\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    popup.js.LICENSE.txt
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.14_0\popup.js.LICENSE.txt
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    rules.json
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.14_0\rules.json
                                                                                                                                                                                                    • Size 839B
                                                                                                                                                                                                    • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    MANIFEST-000001
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\chrome-extension_jifbgnmbgbdiedhdecealmlgmekpagde_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                    • Size 23B
                                                                                                                                                                                                    • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    0fd87f77-c4f5-476b-bebc-39a4f577c8d5.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\0fd87f77-c4f5-476b-bebc-39a4f577c8d5.tmp
                                                                                                                                                                                                    • Size 27KB
                                                                                                                                                                                                    • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    11c54f14-72ff-4c5d-a3e7-670be3dbd8eb.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\11c54f14-72ff-4c5d-a3e7-670be3dbd8eb.tmp
                                                                                                                                                                                                    • Size 27KB
                                                                                                                                                                                                    • SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    3e24d446-e64c-4083-b208-e95ccec69cbd.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\3e24d446-e64c-4083-b208-e95ccec69cbd.tmp
                                                                                                                                                                                                    • Size 27KB
                                                                                                                                                                                                    • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    7dfe31d3-b848-4154-87c0-b99efdec0801.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\7dfe31d3-b848-4154-87c0-b99efdec0801.tmp
                                                                                                                                                                                                    • Size 27KB
                                                                                                                                                                                                    • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    fb0ff3e2-4013-45ca-8788-888a38faf6a7.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\fb0ff3e2-4013-45ca-8788-888a38faf6a7.tmp
                                                                                                                                                                                                    • Size 27KB
                                                                                                                                                                                                    • SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Network Persistent State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                    • SHA256 cb9c348cc2e4e1fd5ca448285f3ab21c65fe972ba4e9b4146f0555e8f7f32dda
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    b466dc72-8006-4f96-93d8-44252479086b.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\b466dc72-8006-4f96-93d8-44252479086b.tmp
                                                                                                                                                                                                    • Size 59B
                                                                                                                                                                                                    • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                                                                    • Size 16KB
                                                                                                                                                                                                    • SHA256 cc08bbf6540a22da31e31d3181912e315378f4323641fa11b86cdba341c93393
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 6d00c916b417e4d5fa08caf3fe18b4baf5ffd002c07f74e3efcbf08235b73947
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Secure Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                                                                                                                                                    • Size 125KB
                                                                                                                                                                                                    • SHA256 ccee2c1cebc901086ad91b7b320b8c3959b766a445d5efc06d22f0e8fa77bd62
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    96e2a984-a5a5-4587-ad5e-eba4d6db7b1e.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\96e2a984-a5a5-4587-ad5e-eba4d6db7b1e.tmp
                                                                                                                                                                                                    • Size 72B
                                                                                                                                                                                                    • SHA256 4aaff4b57461b9ff982f91b6eaf90f6c1eca6c743345e65add2988d7111cf015
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    the-real-index
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                    • Size 552B
                                                                                                                                                                                                    • SHA256 f34977d3968a18474550aa3f975bcd220b518eb2e5b0667d5ea934b3c05bcba5
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    CURRENT
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Site Characteristics Database\CURRENT
                                                                                                                                                                                                    • Size 16B
                                                                                                                                                                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    09fc400d-b84b-4e8c-8305-035a9a3228d6.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\09fc400d-b84b-4e8c-8305-035a9a3228d6.tmp
                                                                                                                                                                                                    • Size 429B
                                                                                                                                                                                                    • SHA256 f74ca68b112e6e747edc58d3435c3587166627759dba62d026262173cdce62c9
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 653B
                                                                                                                                                                                                    • SHA256 a48ed74d3627951932b747385e8ce0890ab52a94f9c571a60f5d5b3449c467c7
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 40085e55de8e8b9ffa4aad87cf8eb9e8f83c1b951139e814a7ee08f5318acf16
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 befd26f62aebb6452dd29ce67ee6bd0fc17e1b3bc65cb846c5d35804fd6d77f2
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 1ae63391cc02b158047dd7c52f773ee7e0d0226e28c0efcd44ce75a1e3053888
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 68d3424937b9c7f2032ec78058039b96b7e5e26be799d10b4c6506aa9562f2ca
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 e12dc3cc0a3f4ff87c7d53e7dbe582d0f5e77bb1024c27ba80d9b6d52bd81bef
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 10KB
                                                                                                                                                                                                    • SHA256 8b4c2ed886a6bcc4c20c01a14a9b8ec9673adb303d0c34764c149d8d40d1eff2
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 10KB
                                                                                                                                                                                                    • SHA256 a9483465ee45216da7eb5b64ded9894ce51e08f876f84ee99526851a851ed706
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 11KB
                                                                                                                                                                                                    • SHA256 a3dbcf43093f8c0d4af5b6b81878d059f63479e4ff8a6a6819ded126e56734e6
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 11KB
                                                                                                                                                                                                    • SHA256 4350fbb04668fb21af10495a889cbf8ba80afd2a51ffd0b61dda6278b6a64208
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 541B
                                                                                                                                                                                                    • SHA256 1a0413856fb4422f66282b34d906293e6dabdbc6ff4663d1d4be6948672cbd91
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 781B
                                                                                                                                                                                                    • SHA256 fbea0af4afc1aa7d929bfefe92cf7296e50b40b1a1b052af338ab28d257b2962
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 957B
                                                                                                                                                                                                    • SHA256 e40aad4013983c7aa704f55f3ed9d53c285222443ee541e5b454a10f63019cc7
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 8748435562c48203b2c4fff879f7764087ad8b8dcc8e5ab411d0382e7504bdd8
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 c927d97c5a478f287a75863b8496e2076a4c6a200ca686c494bf1a9e41817af9
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 6a25cc138e34a409b8b6e94bbf18e623e470558ba6711f3a66c84987deee9f9a
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 b5da25a1ad5fc67b3d3a0ca682c07b4082949afb30c9657ebd3693ad2fd1c3d4
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 e8a1affe830c7377cb60830a7bee04b255dc80cf1e5044d4f8123b1b68b10870
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 8fdd60480b32d30af5b49f5b10023e2f7232c1fb38b4f0844c16c25e8d067692
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 bf9ca2c8bd18be8c116f3140345bcfdfabfc766a38960d5d47806e1d7811cc1e
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 54ac554ff54b8885118164e02bb1a1550e2e16d5fe647dfbc37db0781a2e6f27
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 5040004374b95563e95a17317120237ef7518f3edbcfd2c3d3c82f2e95be8adf
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 391ba8b0a1ef32fe250ff277fa2fd3a37614f2162c19c09bccb2c3eee08f7603
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 f068d5607b42fbeaa67881f0785a33adfce0fa0ac6cfb6eb838bc58d11fd9e68
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 f1e986875dbcbc7a51b4d445d8196b407731fea86b5976b80cb415d551a2a622
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 7KB
                                                                                                                                                                                                    • SHA256 1ed9fd6836db412659997a46ccf151317b27a2774f294d9b2168ed2d88fcfedc
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 91547cc07883ee73e673d22558dca45c5e7130dbe80725c8e882858ccb551325
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 375f635307f665095a22e690e3a51958c7fd6895a81c4d47d6bc7aa543ec73e0
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 800f1ebe6fe8984cb78e57ff591b4ba41e713b3e56795caba6f46dfa20340c44
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 11KB
                                                                                                                                                                                                    • SHA256 6b2fbf5a6edf8020c08a2d820b9f023d27a484ce861b0582beb1c15c49372e59
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 11KB
                                                                                                                                                                                                    • SHA256 0d91e66a56bf51ce317d2f1f2f0b746aebbcbc7f5a34f7ab08dcbde40bc49107
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 63ae778df445c7df62e9de708bb64f25be67e8b3f9cf3c5ded65a5f96608fedf
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 11KB
                                                                                                                                                                                                    • SHA256 76fbcff0730a27994aef6a8d3d6ed3247cd6fa8e64e5e31338e79732b29a2106
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 11KB
                                                                                                                                                                                                    • SHA256 948aa5c960541606cba3f765b777a6cff2d54af67a48ec058df70a2358059ad8
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 11KB
                                                                                                                                                                                                    • SHA256 6d8726a61364a48364394178e171dc2af560b039368e58e47c203b521e8b2581
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 2e8315d7d808ffc1e1f9682b231b7d9cb10da1b01f28964af6df6d4a1e733f3f
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 ce418cf5f7a17c2468fd584798c6786dbbb33fb4f8620fdbf71a36f68285233a
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 baa35a19cf4cfc5a103b3c5f65a3a0017b092bc48ea7f0bb70d465bbb53bc4ef
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 ede4cf0c6955ba9b6f969dc82f5ad63dff309e16db864cbcbea6a99e4d2ff506
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 00ffa7fcdae190d289dece3c72fe389a1cb164c8f549d9360276556e8dc8ac13
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 bcb20494eacd07c82dc1f66a82e1f470b92855d53203947120afb06275aaeef2
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 33429725cf18dd95254181cb08f54f0c0bc8e297402afa7c14a7b40433647c8d
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 9e663ed322e4a34f0d121f1dc758adcb235c9da428d933ccfaf3b766b05f5652
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 4d12ab7b7b0d4b20bf747fb71c5c0b909549a3d1748a0a44fd5f24d51b6f2633
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 46557b2ecf160dd29cdc0d8541825dde3629f5da15f00c28f2a859147faa6572
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 11KB
                                                                                                                                                                                                    • SHA256 e0e0a7154415558ba00c570efaa745781511713475e9eec377e78821a9492490
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 5bf8bc119db4022dec4d8bcd39ea476e1c1e1a5b0aaeb51b7cf422eccba6ea94
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 e01dc5af90ce71f27750a42694455db7f32c0a088398105fc9c00adc319455f2
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 d6d0136d946ebd9289f8be3393461c2afa67bfee0d34eb6a748b8e65eec5d2e9
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 bb6aaab6fd6c90de909ceb2ea8dec10b9e53558a46e2560459ff15bef3355652
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 5455ab11f1bae6a266b240eddb4162d7d161817fd9d4909aa226bedaa91b5d50
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 6f1d489ac67d1373b92971dbfd0cfe464adb5ec69ea03109b01013e8ccba1122
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 bf1e466f826f4ad8d2ed7946f9f3827b1fcf69c005041a0e23ecb93f5678c3aa
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 11KB
                                                                                                                                                                                                    • SHA256 9d62ec381de4f0fd0fc630c560492b9176590221d7489cd8eb5bc563d48676af
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 5951dbbf9a165a08179ed5254652a49a9a2f84517557c78e61c327de8f44a7a8
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 cd3ce95c74e49016aa5fda39fa9211219855177ff4f8869d975f1739abb7c5fc
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 bc1086b95b1d17b10758f808935546f74831b44819cda57ff60f69ecd2e89d14
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 fbcd433a73432e635aac87c69d4eadf06dbf76ae49acd772da8c85e7d4c991da
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 e2ac9466538b223456ac8aad19984a7ec101e56f822cefe7a48ce31ed621d36b
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 6eebaa7f15a1b29590b68982506a8451178e59745480755beb0e8d36d3fd4f29
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 13KB
                                                                                                                                                                                                    • SHA256 59e239dd2899790f2f6507cd435565c6545d21ac1c9fe7a5444f68b788e1c404
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 c3779a90a155cc3ac9d5e676eb5f88d649a480020fa083d222a821176282abff
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 c4da12ffcb22e30e42aefb1511fe77b76e99e6561fc36668814000c2c2fa18dd
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 b143d5d8b07e4cbeb862dfd02d24255ba7f9d5b58a5cab648515d45dacf6a13a
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 7adaca2e47c121950dd71138131d90dfd1ba47695a15b9f282c95ac7a2c53ea6
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 519ef96459c86600a456f31622c5ed3f0e37469eb0c3ef44eacd325f0e56aa10
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 a4cb3ee7c7c4e355119fed9e5c0a4a6c169defbd14b8e3af18ec7cd8c9a88b16
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 e141386465278dc770ac344af4416003d463d8db92cf36831c44f96d861793d8
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 11KB
                                                                                                                                                                                                    • SHA256 1e567d02c6782434d006a03dc65f21109238f19ca2cd2b3142dd841bcb31b655
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 fdb8491270e0f7dfe30b3f68cbd13dd49916e756ec7d091471d532d5937d6b48
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 02a6691ab7b924e18f297f5117b5088b658b93e615abff306447332600f61513
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 d3f6b449ca18d9b8932ef5162924f0f7a7e6aa3e77295a062c6f3124fb56387e
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 807d154a32db6194fb6d5af102d432422f1e736a71c22d0e27f0c479b5e7a5d0
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 13KB
                                                                                                                                                                                                    • SHA256 1e7528990280aeb88740934f789fa931d6957ab3250455817d48f08c5e38ea0a
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 dfc03ce9e582c773bb668b735de63fcdcdbf2998a191c6d14eca5ec1a23a74c3
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 201d43bc35720a12ccfea986959a6ff4d67f61d44d41c05e6f8f6116b86e2e38
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_8c0a2433-86b8-476b-88e2-a8672ac612cf.raw
                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                    • SHA256 0a293f651fdd9fe2227ae8ae516f0a8f0c58bec25fe74fd683ba521057ad300d
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    a77825d1-f553-4685-80a3-cc6b19eb3d45.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\a77825d1-f553-4685-80a3-cc6b19eb3d45.tmp
                                                                                                                                                                                                    • Size 12KB
                                                                                                                                                                                                    • SHA256 3e259c81da170593f44b29b1dcf51a0f25ff09fb237575b362100b9b4c8b65d1
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    c0d460c5-8dcb-4ce6-8f5b-1d702852109b.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\c0d460c5-8dcb-4ce6-8f5b-1d702852109b.tmp
                                                                                                                                                                                                    • Size 578KB
                                                                                                                                                                                                    • SHA256 b898ffb3d98d786606cd2e72e5d74fe444f9f302634a48f8f93511e1d588fd5a
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    d8d554b2-e631-4abe-803f-3cfe265ec702.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\d8d554b2-e631-4abe-803f-3cfe265ec702.tmp
                                                                                                                                                                                                    • Size 85KB
                                                                                                                                                                                                    • SHA256 5c44a165d3f39da3a332916a5a39f61410b00cb362ea32311c3313e826c88c06
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 f50c440c8be372627f28df45bea92c596118c8e9cfcf8675d51e30e35adfa0b9
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                    • SHA256 e7f293ca7a5d5fb336d2edeaba17c39cfb8173e1ce452f84c1b7302169db3d34
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                    • SHA256 c783f0ac2d91ef7ab46a8db911047ff352acf3c127fd070d8070c417c47f6c33
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                    • SHA256 8e8d981d19bcf030e2c1e4cfcbd7493e8737d86ddb3dd6a136751227684c5074
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                    • SHA256 199fe4b18e17737c48707b44ccba6ab66d415d9514bece78ca56d83c67f6d463
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 597B
                                                                                                                                                                                                    • SHA256 99bf0bf2b70502ada131e4248a973535a00e5de7971968e5aca570fbdcca6d21
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 7fb2ca454eab9e2533c4e9a0e6a31b19d913ba45face23915c62b56aa157d2ff
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 f182a637ceb35cacc011a3e38c46a4909d40a7212bafebe406ef94532f72b401
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                    • SHA256 48e732315944d4856268d1c86556c65a2e7e558409fe7ddf33d606e04f8ce231
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 265ce7b1fd91848b61a5ce8a3b4af611fb5a24363c5b38118d6e9f523cc9a538
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                    • SHA256 3913ca19244f8f24f788db04ffafe9a903e3b13c5bddc1d4d3da7ae5066551f9
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 690B
                                                                                                                                                                                                    • SHA256 b01b7f35a32834cadb721208d673f69f6857d8e79d89a5243d41fab3397fd5a8
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 870B
                                                                                                                                                                                                    • SHA256 e473c049f249e0acf1988f4bb83f06180207598d54600b38479724d3d7b6412f
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 963B
                                                                                                                                                                                                    • SHA256 f25fdfe0b098e931031e32eeb06eca3f14a9aa9569c6975392f4e7fc4a6a77df
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 29fc7631008543027b183933ed00fd31add43d8a5e830d8066769f027e99f20b
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                    • SHA256 0bc94fdf910d385b38903ba6bbbc5e9f4e4ae4bf68d3fe50a838b0efa19889c1
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 505B
                                                                                                                                                                                                    • SHA256 b9824303ebf57f31ee9a135156e6bc1c25bae22a1baaed5a9625d53b994ea59e
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 779B
                                                                                                                                                                                                    • SHA256 16619c9438cdc1cadfc469c8afa71f8e780b07587aaa3d05b56aa47fd0671cb4
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 39e5ae0eafb532960e85c52578f926e33247d0f885a3e984c5899044bc28a558
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 6912e1c0d89e7e28be18739b27336bf8d1ca0b719b6c33f990d7d1a8dc13c8e8
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                    • SHA256 45cf3b960dee9280a98a61c77ccef0b2035c2d53d057a35b2f2e831104e4e10b
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 80b4343f14aa3db4233571e30913618342bf7a7da192721065d91b295f0c1905
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.0.598474573
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.0.598474573
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 18010f9bcfc3e89da46a73a1bfb8033b15a0da28b95a2caa30e8b8984cfac89f
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.1.771557934
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.1.771557934
                                                                                                                                                                                                    • Size 200B
                                                                                                                                                                                                    • SHA256 c98d97ed4a96f82869adb4616f1d87476eefedd9f00785cfcd53c316d749596f
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.1.771557934
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.1.771557934
                                                                                                                                                                                                    • Size 224B
                                                                                                                                                                                                    • SHA256 68509b2b160d755863e26c658a1587c524db372ff51fa2265a04aa1330b289b8
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.1.771557934
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.1.771557934
                                                                                                                                                                                                    • Size 224B
                                                                                                                                                                                                    • SHA256 2cc9ce2839255b03e0a95dcecc76c9aa9844b2e6b8435a0564ad9459d7cee6d6
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.1.771557934
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.1.771557934
                                                                                                                                                                                                    • Size 480B
                                                                                                                                                                                                    • SHA256 665d8792b498f62d0560479c96b1b4da7f3fc309bd8f6663e042fa371585ec4d
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.1.771557934
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.1.771557934
                                                                                                                                                                                                    • Size 382B
                                                                                                                                                                                                    • SHA256 0f1816d6ef4d279686ee0f236e3e6902029d1ca72648a279554c7d0590b7fff3
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.1.771557934
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.1.771557934
                                                                                                                                                                                                    • Size 542B
                                                                                                                                                                                                    • SHA256 a257b70486e3d8b5cf91899b32a1f0d04f84066dcb162d6895eba4f7d6821d7e
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.1.771557934
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.1.771557934
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 0d308e1b564bb4c0b57b4b9c55622c6d2817413003646720172d1f87678016c8
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.1.771557934
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.1.771557934
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 a3cd9dfafdacdba915acc6395d2b39c483f39b48be6e2d0d7de55fa8e8c09128
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.1.771557934
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.1.771557934
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 98492105d9f58de8a508431194a9e78ebfa6407c80a7e86065a7a209f8f73a0d
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.1.771557934
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.1.771557934
                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                    • SHA256 1bac4208d66998db12c4da9a1c9293dfbc125ca77b901659c9b8e7a4428632a1
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.1.771557934
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.1.771557934
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 f4659598d53ab82d4862d22f43cffec4875d1dd0d09fd39896e2d89f2ea4a53a
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.1.771557934
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.1.771557934
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 877f57fdd2cc6f315f17856811bcf2d6f19a7522d36afcdad5d0f63d2014edb4
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.1.771557934
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.1.771557934
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 de5885cdaf6643566945db3a20ed6fae6cf8ddc85c85b2b9a4cc2b0c5696b555
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.1.771557934
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.1.771557934
                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                    • SHA256 cd885cd2fd0d7aad687d1c68c6366f4c62bff777005751ff626fd502b2903378
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.1.771557934
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.1.771557934
                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                    • SHA256 adea65e5a7c56d4c12a8bd31408653b7f491c816b56f3c03f2a9473a13b90bd7
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ssdfp5604.2.1899631621
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp5604.2.1899631621
                                                                                                                                                                                                    • Size 242B
                                                                                                                                                                                                    • SHA256 e5fa2eaff2d8916ebb3a589fc5c9444852cc30416af7947a31f4fa68a3ad5f6b
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    data_0
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    data_2
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    data_3
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                    • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                    • SHA256 96aa5a0f104b722259bb12bdd1d0b68d6222c699459dacd1f50c3cab2a8d6262
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    assistant_prefs.json
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json
                                                                                                                                                                                                    • Size 151B
                                                                                                                                                                                                    • SHA256 f450258a43244a58e999117a193623ab98b4d435c93fa369004d96a031dfc471
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    5d94c05e-f881-42ba-90c2-747b589395f9.tmp
                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\extensions_crx_cache\5d94c05e-f881-42ba-90c2-747b589395f9.tmp
                                                                                                                                                                                                    • Size 13B
                                                                                                                                                                                                    • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    ByteBreaker V1_80031870.exe
                                                                                                                                                                                                    • Path C:\Users\Admin\Downloads\ByteBreaker V1_80031870.exe
                                                                                                                                                                                                    • Size 695KB
                                                                                                                                                                                                    • SHA256 bcb1db78d0562ea1c33f57dfa254d09877df0e2c12dc4038905df02144761aa8
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    bytebreakerV1.zip
                                                                                                                                                                                                    • Path C:\Users\Admin\Downloads\bytebreakerV1.zip
                                                                                                                                                                                                    • Size 16.0MB
                                                                                                                                                                                                    • SHA256 74da5f785c95021eeb25dbe3c37a460e163dfdfe9df95e87e04e169171d5ea0d
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    settings.dat
                                                                                                                                                                                                    • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.WebView2\EBWebView\Crashpad\settings.dat
                                                                                                                                                                                                    • Size 280B
                                                                                                                                                                                                    • SHA256 ada0d9c7688ca0538b51464dd410e9960c3709ba7aab9e0662ab8775e5d6ea7f
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences
                                                                                                                                                                                                    • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.WebView2\EBWebView\Default\Preferences
                                                                                                                                                                                                    • Size 6KB
                                                                                                                                                                                                    • SHA256 15f1185f782c4aec85765904d8c2f29dff9fef928df1716925a1cb5b25765ed4
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Preferences~RFe5f8026.TMP
                                                                                                                                                                                                    • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.WebView2\EBWebView\Default\Preferences~RFe5f8026.TMP
                                                                                                                                                                                                    • Size 6KB
                                                                                                                                                                                                    • SHA256 48b6daa4692aba7ece48e30d1484eeba397b222f9278c9bbaf02d5205b77eeb4
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.WebView2\EBWebView\Local State
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 36e14af7776122762f81d64ef8a65f1ddf128efaead07042820d0fe60a9555e0
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.WebView2\EBWebView\Local State
                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                    • SHA256 f448a60234363bb0d6c3f23e65c941029aa3381214333a6e775d0d5652fdee7c
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.WebView2\EBWebView\Local State
                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                    • SHA256 a40687e9e8cf03437aab456f56eac258590c4935557eac09d2b1ae872d145394
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State
                                                                                                                                                                                                    • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.WebView2\EBWebView\Local State
                                                                                                                                                                                                    • Size 16KB
                                                                                                                                                                                                    • SHA256 77449371c819af7c3596efea4e3b7e4bdb487b950c975891f08134b1f60d9ffc
                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    Local State~RFe5eef11.TMP
                                                                                                                                                                                                    • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.WebView2\EBWebView\Local State~RFe5eef11.TMP
                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                    • SHA256 3c7828b262cf44706129717598633403d0b98dce1c553976a4770c63b531cc0b
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    bytebreakerV1.exe.config
                                                                                                                                                                                                    • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.config
                                                                                                                                                                                                    • Size 168B
                                                                                                                                                                                                    • SHA256 fada696885e56cd4fa840a3299560528252ae6ff606141779d1cca4d8751174f
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    bytebreakerV1.exe.config
                                                                                                                                                                                                    • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.config
                                                                                                                                                                                                    • Size 751B
                                                                                                                                                                                                    • SHA256 a0be2eb22e923dfd6ac82e6e217c297cd219dec6a7a8a31e65684056905e6602
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    bytebreakerV1.exe.config
                                                                                                                                                                                                    • Path C:\Users\Admin\Downloads\bytebreakerV1\bytebreakerV1\bytebreakerV1.exe.config
                                                                                                                                                                                                    • Size 349B
                                                                                                                                                                                                    • SHA256 0e35ebb4738e9a1cb6f22b1ca32cc01aafcf38eb1259baacbe36dde5a28e2501
                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                    Submit Download

                                                                                                                                                                                                    memory/5676-679-0x00000298DA540000-0x00000298DA562000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/5680-1049-0x00007FFAC4750000-0x00007FFAC4751000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/5680-1050-0x00007FFAC4CD0000-0x00007FFAC4CD1000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/6936-5855-0x00007FFAC4750000-0x00007FFAC4751000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/6936-5854-0x00007FFAC4CD0000-0x00007FFAC4CD1000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/7028-5789-0x00007FFAC4AC0000-0x00007FFAC4AC1000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8560-5885-0x00007FFAC4AC0000-0x00007FFAC4AC1000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8956-4923-0x000001EB1F3E0000-0x000001EB1F478000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8956-5035-0x000001EB24000000-0x000001EB2400E000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8956-4511-0x000001EB1EDE0000-0x000001EB1EE8C000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8956-4514-0x000001EB1EE90000-0x000001EB1EF44000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8956-5057-0x000001EB25110000-0x000001EB25296000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8956-6092-0x00000000003F0000-0x00000000010CE000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8956-5765-0x000001EB20080000-0x000001EB20088000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8956-4513-0x000001EB1E9E0000-0x000001EB1E9F8000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8956-4512-0x000001EB1E9C0000-0x000001EB1E9DA000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8956-4510-0x00000000003F0000-0x00000000010CE000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8956-4509-0x00000000003F0000-0x00000000010CE000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8956-4875-0x00000000003F0000-0x00000000010CE000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8956-5034-0x000001EB24040000-0x000001EB24078000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8956-5033-0x000001EB1F3C0000-0x000001EB1F3C8000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/8956-4505-0x00000000003F0000-0x00000000010CE000-memory.dmp
                                                                                                                                                                                                    Download

                                                                                                                                                                                                    memory/9124-5980-0x000002143F280000-0x000002143F2E1000-memory.dmp
                                                                                                                                                                                                    Download