Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    08/09/2026, 22:18

General

  • Target
    67Client-1.6.2.jar
  • Size 3.3MB
  • Sample260908-171fvayscs
  • SHA256 2b6989dafb3388b98cf65b1404f9aead1977d9cfdee99e3e73f7dd78256dcab0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Downloads MZ/PE file 4 IoCs
  • Checks computer location settings 2 TTPs 22 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file 15 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 15 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 47 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 24 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\67Client-1.6.2.jar
    1⤵
      PID:3136
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:4428
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffaf7aac728,0x7ffaf7aac734,0x7ffaf7aac740
        2⤵
          PID:4644
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,3893575186747635453,1821813996337129814,262144 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2016 /prefetch:2
          2⤵
            PID:3836
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1884,i,40065071061672475,4567551355350624922,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2328 /prefetch:3
            2⤵
            • Downloads MZ/PE file
            • System Time Discovery
            PID:4416
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2460,i,9823934687777484191,14018450722276270317,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2400 /prefetch:8
            2⤵
              PID:3876
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3276,i,3517405975622616928,6599262812750829112,2097152 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:1
              2⤵
                PID:4512
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3424,i,17582805565485394531,5501065418352857723,2097152 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3532 /prefetch:1
                2⤵
                  PID:2376
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4200,i,12423854108016735422,8689759235523510750,2097152 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4428 /prefetch:2
                  2⤵
                    PID:3096
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4776,i,7310567110660482967,17630037784017902101,2097152 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4788 /prefetch:1
                    2⤵
                      PID:4056
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4760,i,425610166836751212,9985133139305411582,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4904 /prefetch:8
                      2⤵
                        PID:536
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5052,i,708291073618676668,3652823744998244785,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5060 /prefetch:8
                        2⤵
                          PID:4352
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5548,i,5506991686234277818,16886781802833850881,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5568 /prefetch:8
                          2⤵
                            PID:3972
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5608,i,17616809077779352264,5014326671623451614,2097152 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5632 /prefetch:1
                            2⤵
                              PID:464
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3532,i,11760481847985360221,15645561851671978507,2097152 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5964 /prefetch:1
                              2⤵
                                PID:1880
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3520,i,10015554522344841213,2900681220731753046,2097152 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3132 /prefetch:1
                                2⤵
                                  PID:3716
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6208,i,18182575215068176208,12493608616038449896,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4808 /prefetch:8
                                  2⤵
                                    PID:3152
                                  • C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe
                                    "C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe"
                                    2⤵
                                    • Checks computer location settings
                                    • Executes dropped EXE
                                    • System Location Discovery: System Language Discovery
                                    • Suspicious use of WriteProcessMemory
                                    PID:2708
                                    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:3969818 "__IRAFN:C:\Users\Admin\Downloads\TLauncher-Installer-1.9.5.1.exe" "__IRCT:3" "__IRTSS:26673860" "__IRSID:S-1-5-21-2937465464-4167303362-2236413517-1000"
                                      3⤵
                                      • Checks computer location settings
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • System Location Discovery: System Language Discovery
                                      • Suspicious use of SetWindowsHookEx
                                      • Suspicious use of WriteProcessMemory
                                      PID:2524
                                      • C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
                                        "C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
                                        4⤵
                                        • Checks computer location settings
                                        • Executes dropped EXE
                                        • System Location Discovery: System Language Discovery
                                        • Suspicious use of WriteProcessMemory
                                        PID:5736
                                        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                          "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:3839250 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:3869932" "__IRSID:S-1-5-21-2937465464-4167303362-2236413517-1000"
                                          5⤵
                                          • Downloads MZ/PE file
                                          • Checks computer location settings
                                          • Executes dropped EXE
                                          • Loads dropped DLL
                                          • System Location Discovery: System Language Discovery
                                          • Suspicious behavior: EnumeratesProcesses
                                          • Suspicious use of SetWindowsHookEx
                                          • Suspicious use of WriteProcessMemory
                                          PID:5832
                                          • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                                            "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=0
                                            6⤵
                                            • Executes dropped EXE
                                            • System Location Discovery: System Language Discovery
                                            • Suspicious use of WriteProcessMemory
                                            PID:6048
                                            • C:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exe
                                              C:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exe --silent --allusers=0 --server-tracking-blob=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
                                              7⤵
                                              • Downloads MZ/PE file
                                              • Executes dropped EXE
                                              • Enumerates connected drives
                                              • Enumerates system info in registry
                                              • Modifies system certificate store
                                              • Suspicious use of WriteProcessMemory
                                              PID:6096
                                              • C:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exe
                                                C:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff657751608,0x7ff657751618,0x7ff657751628
                                                8⤵
                                                • Executes dropped EXE
                                                PID:3212
                                              • C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\installer.exe
                                                "C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\installer.exe" --version
                                                8⤵
                                                • Executes dropped EXE
                                                PID:5288
                                              • C:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exe
                                                "C:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=6096 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_20260908231916" --session-guid=1cc9ffee-b718-4921-b225-d1645252204a --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=3C07000000000000
                                                8⤵
                                                • Executes dropped EXE
                                                • Enumerates connected drives
                                                • Enumerates system info in registry
                                                • Suspicious use of WriteProcessMemory
                                                PID:5220
                                                • C:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exe
                                                  C:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x280,0x290,0x294,0x25c,0x298,0x7ff657751608,0x7ff657751618,0x7ff657751628
                                                  9⤵
                                                  • Executes dropped EXE
                                                  PID:5424
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe" --backend --initial-pid=6096 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161" --session-guid=1cc9ffee-b718-4921-b225-d1645252204a --server-tracking-blob="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 " --silent --desktopshortcut=1 --install-subfolder=135.0.5973.94
                                                  9⤵
                                                  • Executes dropped EXE
                                                  • Enumerates connected drives
                                                  • Enumerates system info in registry
                                                  • Modifies registry class
                                                  • Suspicious use of FindShellTrayWindow
                                                  • Suspicious use of SendNotifyMessage
                                                  • Suspicious use of SetWindowsHookEx
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:5620
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ff781b71608,0x7ff781b71618,0x7ff781b71628
                                                    10⤵
                                                    • Executes dropped EXE
                                                    PID:5124
                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe
                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                                                    10⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • Adds Run key to start application
                                                    • System Location Discovery: System Language Discovery
                                                    • Modifies Internet Explorer settings
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:5872
                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe
                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x244,0x248,0x24c,0x240,0x250,0xd0cb80,0xd0cb8c,0xd0cb98
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • System Location Discovery: System Language Discovery
                                                      PID:6056
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • System Location Discovery: System Language Discovery
                                                      • Enumerates system info in registry
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:5348
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x23c,0x240,0x244,0x44,0x248,0x48cb80,0x48cb8c,0x48cb98
                                                        12⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • System Location Discovery: System Language Discovery
                                                        PID:6088
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                                                        12⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • System Location Discovery: System Language Discovery
                                                        • Suspicious use of FindShellTrayWindow
                                                        • Suspicious use of SendNotifyMessage
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:1344
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                          13⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Enumerates system info in registry
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:1300
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x1a0,0x1a4,0x1a8,0x19c,0x128,0x7ffad1a6e330,0x7ffad1a6e340,0x7ffad1a6e350
                                                            14⤵
                                                            • Executes dropped EXE
                                                            PID:3204
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                          13⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:5880
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x174,0x178,0x170,0x140,0x16c,0x7ffad1a6e330,0x7ffad1a6e340,0x7ffad1a6e350
                                                            14⤵
                                                            • Executes dropped EXE
                                                            PID:2468
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x27c,0x280,0x284,0x250,0x288,0x141e2bc,0x141e2c8,0x141e2d4
                                                          13⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • System Location Discovery: System Language Discovery
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:1232
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                            14⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • Enumerates system info in registry
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:5412
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x1cc,0x1d0,0x1c8,0x198,0x1c4,0x7ffad1a6e330,0x7ffad1a6e340,0x7ffad1a6e350
                                                              15⤵
                                                              • Executes dropped EXE
                                                              PID:3596
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                            14⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • Enumerates system info in registry
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:916
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x188,0x140,0x178,0x184,0x17c,0x7ffad1a6e330,0x7ffad1a6e340,0x7ffad1a6e350
                                                              15⤵
                                                              • Executes dropped EXE
                                                              PID:5636
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                            14⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:3052
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x188,0x18c,0x190,0x184,0x194,0x7ffad1a6e330,0x7ffad1a6e340,0x7ffad1a6e350
                                                              15⤵
                                                              • Executes dropped EXE
                                                              PID:176
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                                                    10⤵
                                                    • Checks computer location settings
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • Adds Run key to start application
                                                    • Checks processor information in registry
                                                    • Enumerates system info in registry
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                    • Suspicious use of FindShellTrayWindow
                                                    • Suspicious use of SendNotifyMessage
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:6112
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x174,0x178,0x170,0x140,0x16c,0x7ffad1a6e330,0x7ffad1a6e340,0x7ffad1a6e350
                                                      11⤵
                                                      • Executes dropped EXE
                                                      PID:3944
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1704,i,6908372712341667298,7413567528103502781,262144 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1892 /prefetch:2
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      PID:5416
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2152,i,10099105720701100523,15315210683559859368,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2156 /prefetch:3
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • System Time Discovery
                                                      • Enumerates system info in registry
                                                      PID:1316
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2424,i,2016887104785103401,8701641142715126342,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2436 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Enumerates system info in registry
                                                      PID:6244
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2896,i,14431369962219658529,2648885508080412736,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3336 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      PID:6396
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3352,i,17623279480237004148,16479819643562364706,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3424 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Enumerates system info in registry
                                                      PID:6404
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3388,i,9342773007807082769,14243759623696646557,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3476 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Enumerates system info in registry
                                                      PID:6412
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3400,i,3975551015476934723,5053091845108857977,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3496 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Enumerates system info in registry
                                                      PID:6420
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3364,i,14143844737465825683,1696049773969248620,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3436 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Enumerates system info in registry
                                                      PID:6428
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3376,i,7072969793629472184,6633630321257388264,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3456 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      PID:6436
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4092,i,5653647696008059873,17767514663176758440,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4100 /prefetch:1
                                                      11⤵
                                                      • Checks computer location settings
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      PID:6492
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_gx_splash.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                                                      11⤵
                                                      • Executes dropped EXE
                                                      PID:7048
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4632,i,16716898855313739137,12319068012757944142,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4648 /prefetch:1
                                                      11⤵
                                                      • Checks computer location settings
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Enumerates system info in registry
                                                      PID:6332
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4832,i,8061372545559595930,445466227276740812,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4840 /prefetch:2
                                                      11⤵
                                                      • Checks computer location settings
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      PID:6476
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5000,i,4478033071891134039,11564341180576346349,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5004 /prefetch:1
                                                      11⤵
                                                      • Checks computer location settings
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Enumerates system info in registry
                                                      PID:6664
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5224,i,3523233922195880251,16865426008603159806,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5240 /prefetch:1
                                                      11⤵
                                                      • Checks computer location settings
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      PID:6516
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5364,i,7595867788356113774,2172388789731072084,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5484 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      PID:6612
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5368,i,9303684625542913078,244327670096260335,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5248 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      PID:6624
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5372,i,3885453913169344042,17841292449147002801,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5348 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Enumerates system info in registry
                                                      PID:6628
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5376,i,11264355050039118328,1030610808043196935,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5496 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      PID:6636
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5948,i,12304735641433444880,3919964347598564811,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5976 /prefetch:2
                                                      11⤵
                                                      • Checks computer location settings
                                                      • Executes dropped EXE
                                                      • Enumerates system info in registry
                                                      PID:2832
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6272,i,694850205187923961,3609164969583321248,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6316 /prefetch:2
                                                      11⤵
                                                      • Checks computer location settings
                                                      • Executes dropped EXE
                                                      PID:6140
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6520,i,12346733498326000475,17557009536063353456,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6568 /prefetch:2
                                                      11⤵
                                                      • Checks computer location settings
                                                      • Executes dropped EXE
                                                      • Enumerates system info in registry
                                                      PID:5248
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6704,i,14377425914756485766,3474360364371563307,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6268 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Enumerates system info in registry
                                                      PID:7992
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4984,i,4261274929447871573,17467941431522414520,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=7128 /prefetch:1
                                                      11⤵
                                                      • Checks computer location settings
                                                      • Executes dropped EXE
                                                      • Enumerates system info in registry
                                                      PID:8148
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7288,i,10211813683888321515,14848748181476330740,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7292 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Enumerates system info in registry
                                                      PID:8160
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7432,i,17580883033649836103,9311785070292254231,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7440 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      PID:8176
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7448,i,4311519018233431215,8083825541023355998,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7468 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      PID:8184
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7492,i,12785536718284276295,14268666275743974832,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7732 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Enumerates system info in registry
                                                      PID:6820
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7864,i,16713679339538162314,3450765488022564172,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7872 /prefetch:8
                                                      11⤵
                                                      • Executes dropped EXE
                                                      • Enumerates system info in registry
                                                      PID:6608
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7880,i,15718493456018166945,16075484501668506728,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8016 /prefetch:8
                                                      11⤵
                                                        PID:3740
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8120,i,17902944426647755921,3423031798752682124,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8168 /prefetch:8
                                                        11⤵
                                                          PID:2664
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8160,i,6369792385784974455,11591559942321552011,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8288 /prefetch:8
                                                          11⤵
                                                          • Enumerates system info in registry
                                                          PID:5332
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8292,i,1935984266038277256,16295348523419872093,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8348 /prefetch:8
                                                          11⤵
                                                          • Enumerates system info in registry
                                                          PID:7148
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8340,i,3677515061369552355,3862569849298476389,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8608 /prefetch:8
                                                          11⤵
                                                          • Enumerates system info in registry
                                                          PID:532
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8768,i,775790037554949946,16979222076488532152,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8752 /prefetch:8
                                                          11⤵
                                                          • Enumerates system info in registry
                                                          PID:6816
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8636,i,4990512881228374407,17532262532313395316,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8760 /prefetch:8
                                                          11⤵
                                                          • Enumerates system info in registry
                                                          PID:6812
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9140,i,14380181870565409609,7166014349550022544,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9136 /prefetch:2
                                                          11⤵
                                                          • Checks computer location settings
                                                          PID:8000
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9304,i,3807664175884224926,1133639488154757037,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9312 /prefetch:8
                                                          11⤵
                                                            PID:7192
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                                                            11⤵
                                                            • Enumerates system info in registry
                                                            PID:7336
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff682bcc278,0x7ff682bcc288,0x7ff682bcc298
                                                              12⤵
                                                                PID:7976
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9612,i,10912160774858085262,12019712225233042511,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9896 /prefetch:8
                                                              11⤵
                                                                PID:6792
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=10060,i,9062910671000788070,5867889113632857781,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10092 /prefetch:1
                                                                11⤵
                                                                • Checks computer location settings
                                                                • Enumerates system info in registry
                                                                PID:7264
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10208,i,1783465870249395471,5521069361891438306,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10228 /prefetch:8
                                                                11⤵
                                                                • Enumerates system info in registry
                                                                PID:7284
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10580,i,14241239487429434262,3370684671887211308,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10572 /prefetch:8
                                                                11⤵
                                                                  PID:6980
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe" --fix-taskbar-pins
                                                                  11⤵
                                                                    PID:7280
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ff781b71608,0x7ff781b71618,0x7ff781b71628
                                                                      12⤵
                                                                        PID:8008
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10648,i,11771003847120804029,2026368118547424511,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10688 /prefetch:8
                                                                      11⤵
                                                                      • Enumerates system info in registry
                                                                      PID:5252
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10808,i,9294557878729879702,2291355412177164797,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10772 /prefetch:8
                                                                      11⤵
                                                                        PID:2152
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7724,i,12042774119534879890,12398171784720852522,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10360 /prefetch:8
                                                                        11⤵
                                                                        • Enumerates system info in registry
                                                                        PID:7868
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5724,i,1779110879982696334,9257591177210671754,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=4152 /prefetch:8
                                                                        11⤵
                                                                        • Enumerates system info in registry
                                                                        PID:7420
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8372,i,283460970979368356,11350651629971451988,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=8556 /prefetch:8
                                                                        11⤵
                                                                        • Enumerates system info in registry
                                                                        PID:7444
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8248,i,15877593055832495317,17473123987609076665,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=8220 /prefetch:8
                                                                        11⤵
                                                                        • Enumerates system info in registry
                                                                        PID:7328
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7764,i,12158675682907063113,9256650457341705985,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=8144 /prefetch:8
                                                                        11⤵
                                                                          PID:5232
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7604,i,7093601484137327911,7618231809282330152,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=7728 /prefetch:8
                                                                          11⤵
                                                                            PID:1872
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5668,i,11508020247252919910,6613565206198390310,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=7728 /prefetch:8
                                                                            11⤵
                                                                              PID:7600
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8864,i,18338357602752528822,10931965996678309949,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=10924 /prefetch:8
                                                                              11⤵
                                                                              • Enumerates system info in registry
                                                                              PID:8032
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8820,i,12349433212407557382,3882867397625330881,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=7768 /prefetch:8
                                                                              11⤵
                                                                              • Enumerates system info in registry
                                                                              PID:6564
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8832,i,10061387917693265191,6284254210345850945,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=7812 /prefetch:8
                                                                              11⤵
                                                                              • Enumerates system info in registry
                                                                              PID:6744
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=8464,i,12461513829856743702,18174306466549132747,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=9932 /prefetch:2
                                                                              11⤵
                                                                              • Checks computer location settings
                                                                              • Enumerates system info in registry
                                                                              PID:3088
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4160,i,15036454534742337572,2158331029374827889,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=8492 /prefetch:8
                                                                              11⤵
                                                                                PID:6484
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8904,i,3365388913191283413,13855335972802096757,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=9436 /prefetch:8
                                                                                11⤵
                                                                                • Enumerates system info in registry
                                                                                PID:6968
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8004,i,17279159733784357973,15218866885219171226,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8672 /prefetch:8
                                                                                11⤵
                                                                                • Enumerates system info in registry
                                                                                PID:7864
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=7784,i,11351628341819085496,7780039052660845861,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8300 /prefetch:2
                                                                                11⤵
                                                                                • Checks computer location settings
                                                                                PID:7144
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10292,i,6175997345372341455,2302456279108879066,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=7820 /prefetch:8
                                                                                11⤵
                                                                                  PID:7456
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3464,i,3023445515206779786,3674556217407012456,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=3424 /prefetch:8
                                                                                  11⤵
                                                                                  • Enumerates system info in registry
                                                                                  PID:7252
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5732,i,6444447953485310469,11342709987877281852,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=3400 /prefetch:8
                                                                                  11⤵
                                                                                  • Enumerates system info in registry
                                                                                  PID:7248
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=9900,i,7377668144585013769,772720061041863519,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=10300 /prefetch:2
                                                                                  11⤵
                                                                                  • Checks computer location settings
                                                                                  PID:8020
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10028,i,17023737095832225833,3387857555354854792,524288 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=10380 /prefetch:8
                                                                                  11⤵
                                                                                  • Enumerates system info in registry
                                                                                  PID:7620
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=7900,i,6986399547143913393,650164463353078675,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=7980 /prefetch:2
                                                                                  11⤵
                                                                                  • Checks computer location settings
                                                                                  • Enumerates system info in registry
                                                                                  PID:5388
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=10344,i,5173710056207255571,17191902141114742046,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=9884 /prefetch:2
                                                                                  11⤵
                                                                                  • Checks computer location settings
                                                                                  PID:8816
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 OPR/135.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:continue-on-support-with-booking=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:image-search-support=on --with-feature:improved-adblocker=off --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=7068,i,10727070059508820385,13612821830298819190,2097152 --field-trial-handle=1896,i,14162854404019001918,1128988385649493318,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1908,i,16543449371898449231,12299056791925806433,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=8772 /prefetch:2
                                                                                  11⤵
                                                                                  • Checks computer location settings
                                                                                  PID:8692
                                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe
                                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe"
                                                                            8⤵
                                                                            • Executes dropped EXE
                                                                            • System Location Discovery: System Language Discovery
                                                                            PID:5620
                                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe
                                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe" --version
                                                                            8⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • System Location Discovery: System Language Discovery
                                                                            • Enumerates system info in registry
                                                                            • Suspicious use of WriteProcessMemory
                                                                            PID:3348
                                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe
                                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0xd0cb80,0xd0cb8c,0xd0cb98
                                                                              9⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              • System Location Discovery: System Language Discovery
                                                                              PID:5640
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6476,i,9327344800898870054,3649258700261003843,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6500 /prefetch:8
                                                                2⤵
                                                                  PID:5212
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6492,i,2893879641670614422,9121367171110572517,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6480 /prefetch:8
                                                                  2⤵
                                                                    PID:5220
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6496,i,726963313615920184,10109411438555286596,524288 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6556 /prefetch:8
                                                                    2⤵
                                                                      PID:5228
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=2588,i,10570882145386997623,11071655993365701845,262144 --field-trial-handle=2028,i,4089830584818534285,7286850419318879202,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6008 /prefetch:8
                                                                      2⤵
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:8276
                                                                  • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                    "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                    1⤵
                                                                      PID:2604
                                                                    • C:\Windows\system32\svchost.exe
                                                                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                      1⤵
                                                                        PID:2012
                                                                      • C:\Windows\SysWOW64\DllHost.exe
                                                                        C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                                                                        1⤵
                                                                        • System Location Discovery: System Language Discovery
                                                                        • Suspicious use of SetWindowsHookEx
                                                                        PID:5040
                                                                      • C:\Windows\system32\wbem\unsecapp.exe
                                                                        C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                        1⤵
                                                                          PID:3956
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                                          1⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          PID:7064
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x168,0x16c,0x170,0x164,0x174,0x7ffad1a6e330,0x7ffad1a6e340,0x7ffad1a6e350
                                                                            2⤵
                                                                            • Executes dropped EXE
                                                                            PID:7088
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                                          1⤵
                                                                          • Enumerates system info in registry
                                                                          PID:1856
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=135.0.5973.94 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff682bcc278,0x7ff682bcc288,0x7ff682bcc298
                                                                            2⤵
                                                                              PID:3352
                                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
                                                                              2⤵
                                                                                PID:7260

                                                                            Network

                                                                                  MITRE ATT&CK Enterprise v16

                                                                                  Replay Monitor

                                                                                  Loading Replay Monitor...

                                                                                  Downloads

                                                                                  E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                  • Size 471B
                                                                                  • SHA256 1de119d74f8580b82c13ed95eeb4c554b1daecc2ffd54870aea9297fe988b603
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                  • Size 416B
                                                                                  • SHA256 9105662e9abde06f51558b764555bbad70a14a31cffec758274438c6e6159461
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  BookmarkMergedSurfaceOrdering

                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                  • Size 6B
                                                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                  • MD5 SHA1 SHA512

                                                                                  BrowsingTopicsState

                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                  • Size 414B
                                                                                  • SHA256 18a5173aced8b462ad8b6f34a3637eba707b3c73fe991a95d10f720bc700c99b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  the-real-index

                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                  • Size 912B
                                                                                  • SHA256 ec236351b2154909db3e7bcdf24503a9e8fba2cae2ee612369911b8c6bdf3c9b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Network Persistent State

                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                  • Size 7KB
                                                                                  • SHA256 9a2cfe18a0871c9fecd0d4bb0f1b55c0ce734d2e9da64363a325a82fdafb337d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  SCT Auditing Pending Reports

                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                  • Size 2B
                                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                  • MD5 SHA1 SHA512

                                                                                  Preferences

                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                  • Size 13KB
                                                                                  • SHA256 555b5bbfd322715ee37eb8fcc8961cc831526df7644b7329983d79958565cd70
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Preferences

                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                  • Size 13KB
                                                                                  • SHA256 91d9ac1725db44d6e186e3b78ad8e472484aab1bbe48acb029e96d4054e3930e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Secure Preferences

                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                  • Size 17KB
                                                                                  • SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  the-real-index

                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                  • Size 120B
                                                                                  • SHA256 76efe7af136a3c53edbe6be4b3ebaf603b7528a8494acab7d67b0a3bdefcddf1
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  the-real-index~RFe586992.TMP

                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586992.TMP
                                                                                  • Size 96B
                                                                                  • SHA256 7b1c9bfc943ebe15a0c9b872ba297f25c59418c1b984b9c73c1aa0b932a6d137
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  the-real-index

                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                  • Size 96B
                                                                                  • SHA256 0a08acf9819d15ed7aa30c97ac3f18683baa52247cdfa1777c7035453dedfaf9
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  Local State

                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                  • Size 115KB
                                                                                  • SHA256 1d0bdaf8d9cf21c832084ace762847a5517851937f661c40e2323fb370c7b08e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Local State

                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                  • Size 240KB
                                                                                  • SHA256 94d14f819abc9225599b964e8dd2b47adbaa57b7a50f9c7c5b1336c113045d2a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Local State

                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                  • Size 240KB
                                                                                  • SHA256 6c5050f6e2e97ac0427d1a33a1fac691e24f445d37f385a35700b77c0fdf3708
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Local State

                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                  • Size 241KB
                                                                                  • SHA256 63abce3a61b381f4106a665f3ea74f9626778de92a30e1a7d8ac3bc44438f72e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  135.0.5973.94.manifest

                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\135.0.5973.94.manifest
                                                                                  • Size 225B
                                                                                  • SHA256 54d405717c09ff20d23e154f22d3a3ef427d75363a1b6f810548f2a556058728
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  150x150Logo.scale-100.png

                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\Assets\150x150Logo.scale-100.png
                                                                                  • Size 2KB
                                                                                  • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  150x150Logo.scale-100_contrast-white.png

                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                  • Size 1KB
                                                                                  • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  installer.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\installer.exe
                                                                                  • Size 9.1MB
                                                                                  • SHA256 ae3b53ee56212e88701ae593c68d74469939a3426ab903695635b30cf809138b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  custom_partner_content.json

                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\135.0.5973.94\resources\custom_partner_content.json
                                                                                  • Size 245KB
                                                                                  • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  installer_prefs.json

                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json
                                                                                  • Size 1KB
                                                                                  • SHA256 5aba860a63a8ac7c49e92c05fcb2552991e17e36c7dedf246e730e77ea6a94bc
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  opera.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  • Size 2.9MB
                                                                                  • SHA256 63d5fddbaa2f540e9d2bfdbcee2e714dd0b02d4286346bab0a324d03d591decf
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Opera GX Browser.lnk

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\Opera GX Browser.lnk
                                                                                  • Size 1KB
                                                                                  • SHA256 c681ea26d52fb1aa66384f364f66fb9f8d752013fad85cbe722ef3da380537f4
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  additional_file0.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\additional_file0.tmp
                                                                                  • Size 2.8MB
                                                                                  • SHA256 70f1b1cbe5162fd8842c441779ef4d59de6b182d1448fc6285c6a73ae3033fc4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  assistant_installer.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\assistant_installer.exe
                                                                                  • Size 2.4MB
                                                                                  • SHA256 c5eef147beda944c8bff63591165b4c49e556d2c45c6ea9b9f1d9e16f180621e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  dbgcore.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\dbgcore.dll
                                                                                  • Size 196KB
                                                                                  • SHA256 856a7e6aacf1934324f08dc42b4b37cb20886d933cc0c57283c8425f9ebedbdd
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  dbghelp.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\assistant\dbghelp.dll
                                                                                  • Size 1.8MB
                                                                                  • SHA256 8f880333398382fea1efa73751f4b16d8204a60cc13aefc8c4223b8086eccd81
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  installer_prefs_include.json

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\installer_prefs_include.json
                                                                                  • Size 242B
                                                                                  • SHA256 40ea1fbf69784552a6aca6f03f95b7ec4c38332d39c88322835c70b661d643dd
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  installer_prefs_include.json

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\installer_prefs_include.json
                                                                                  • Size 1003B
                                                                                  • SHA256 c818d4e9ce35ca54f18a7f706acab3fde6991bea33b1923479a6773eb41b0300
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  installer_prefs_include.json.backup

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d91414b2-ae25-4182-935d-a99a1ed9b360 Opera GX Installer Temp\opera_package_202609082319161\installer_prefs_include.json.backup
                                                                                  • Size 227B
                                                                                  • SHA256 97331f17409895395d817dd6dab7119ff107665a9f866a3c2926bfa9ada6b1b7
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  installer.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\7zS0A739498\installer.exe
                                                                                  • Size 9.1MB
                                                                                  • SHA256 106c950add527723510ced4b1f516ab7b75b781a356063cafd578da334fb7553
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  200.ico

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico
                                                                                  • Size 116KB
                                                                                  • SHA256 9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  BrowserInstaller.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe
                                                                                  • Size 3.7MB
                                                                                  • SHA256 e20f18d8c5d3621a81d35fe43d759ddb148e35d1856a94fbe95dfbec93127a10
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  IRIMG1.BMP

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.BMP
                                                                                  • Size 12KB
                                                                                  • SHA256 1d7a67b1c0d620506ac76da1984449dfb9c35ffa080dc51e439ed45eecaa7ee0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  IRIMG14.PNG

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG14.PNG
                                                                                  • Size 43KB
                                                                                  • SHA256 6528bb11becf79c17c77a9c6624b82074b9dd6d3e932852c8fe1da22a57854aa
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  IRIMG15.PNG

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG15.PNG
                                                                                  • Size 644B
                                                                                  • SHA256 207bd7ad2eb7f48a2a1be1253363fa120ae79e25eacbd37d6b9be52d2128bfdd
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  IRIMG2.BMP

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.BMP
                                                                                  • Size 12KB
                                                                                  • SHA256 9c893fe1ab940ee4c2424aa9dd9972e7ad3198da670006263ecbbb5106d881e3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  IRIMG3.BMP

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.BMP
                                                                                  • Size 12KB
                                                                                  • SHA256 4c85cdddd497ad81fedb090bc0f8d69b54106c226063fdc1795ada7d8dc74e26
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  IRIMG9.PNG

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG9.PNG
                                                                                  • Size 438B
                                                                                  • SHA256 d16a8eaf8f979e45bacbbd8ef14afe482d74e926dff2e87e569342874ba34145
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  IRZip.lmd

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
                                                                                  • Size 400KB
                                                                                  • SHA256 3a6794c90d69383bd76098992cb512ae343cb2e1a3680dd4794e49895472b429
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Wow64.lmd

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
                                                                                  • Size 252KB
                                                                                  • SHA256 27b48727237cd0f8a1205e01e5c93cbe6c7a2f3938faf8d8daa5191094c347a5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  irsetup.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                                                                  • Size 1.8MB
                                                                                  • SHA256 96070b2d82b6bffd54719f9753909be5f5151edbd5b37b26f50dea2e995ea430
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  lua5.3.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.3.dll
                                                                                  • Size 395KB
                                                                                  • SHA256 eef58c3dae331da03872b973230aa56b40e34035035cca5b468eda0c40daa819
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  irsetup.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                                                                  • Size 1.7MB
                                                                                  • SHA256 ea04ee2883ca5dcb461ea894a4e2def7d0c89f11d9f06f3bae020f6a25e7b75d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  lua5.3.dll

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.3.dll
                                                                                  • Size 395KB
                                                                                  • SHA256 0e43d22649d6b2ecbac9915dc6498fe1f41777dd33147d962b30dad0d5e76ab3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  opera-installer-bro.exe

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                                                                                  • Size 3.9MB
                                                                                  • SHA256 df5b1419d65a88748dfdb298e560ae8e2c8ed2a2b2efba0d35ca951da0adef53
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  7ee151dc-e330-4f49-951a-4230ee638ca1.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_1158479418\7ee151dc-e330-4f49-951a-4230ee638ca1.tmp
                                                                                  • Size 472KB
                                                                                  • SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  2488d01e-2971-4626-8eae-cf8beca38824.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_1696897988\2488d01e-2971-4626-8eae-cf8beca38824.tmp
                                                                                  • Size 2.6MB
                                                                                  • SHA256 c56e30ed1b5c6eb1dc7a00355888fc1994939ba8689756fb27b30323514a57cd
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Icon_Light_Neutral.png

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_1696897988\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                  • Size 2KB
                                                                                  • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  5f04c112-291a-4da2-8042-27b9067b2f83.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_1921613980\5f04c112-291a-4da2-8042-27b9067b2f83.tmp
                                                                                  • Size 1.2MB
                                                                                  • SHA256 9cc80630179e77c7425346c110a59c7de35b5b000253dd322c7853867fbe3316
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  icon-57.png

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_1921613980\CRX_INSTALL\icons\icon-57.png
                                                                                  • Size 873B
                                                                                  • SHA256 8462b976325b85e3fe1140685159792a700d5382f2307d5eb667af10e76d8964
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  cfcbd99c-2600-44fa-8427-4eb6047e68b2.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_537968700\cfcbd99c-2600-44fa-8427-4eb6047e68b2.tmp
                                                                                  • Size 46KB
                                                                                  • SHA256 0443bab24dce89bd68e06dba7f4335db89e70cf99ac92a0919d5df35a2c3cf93
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  favicon_opera_one.png

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_78028922\CRX_INSTALL\favicon_opera_one.png
                                                                                  • Size 2KB
                                                                                  • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  service_worker.js

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_78028922\CRX_INSTALL\service_worker.js
                                                                                  • Size 89KB
                                                                                  • SHA256 54a79133f29c7d1da2b6cbd5934a8fa8a60bdcfef8c23e449cd04e0ccd2cbf27
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  fff57482-6bd7-4fd4-9296-fd8a356d4273.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_78028922\fff57482-6bd7-4fd4-9296-fd8a356d4273.tmp
                                                                                  • Size 4.5MB
                                                                                  • SHA256 a0adcf75c407790bffcac773e97ec98c4ae15791cae3f906d03d1907aaf672ff
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  e221b2c4-fa47-4592-8226-9dd3cd19c80f.tmp

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6112_949846235\e221b2c4-fa47-4592-8226-9dd3cd19c80f.tmp
                                                                                  • Size 13KB
                                                                                  • SHA256 35d78e805a910aad7462893e050376f9d18dbc73c592b4742e6ada87eff3f06b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  setuparguments.ini

                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
                                                                                  • Size 802B
                                                                                  • SHA256 91e71138ef0a06635af847f7e0fa1c6a20b1f2845f78a9c2503dac98c44463cd
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  IRIMG1.PNG

                                                                                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG1.PNG
                                                                                  • Size 45KB
                                                                                  • SHA256 a42ab4d62c5a5286202df15f9ad32b22396d5d12c7a4db8c5a2c98f90160ade1
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  IRIMG10.PNG

                                                                                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG10.PNG
                                                                                  • Size 206B
                                                                                  • SHA256 348e3f3544cca4c9ca2af323fa8b3453a70ea421c82b331681dc1d4ef74921f3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  IRIMG13.PNG

                                                                                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG13.PNG
                                                                                  • Size 41KB
                                                                                  • SHA256 1708790d5496b9cc325cc0249cfa272aac3c3738188fc41eef83e8592de247ff
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  IRIMG3.PNG

                                                                                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG3.PNG
                                                                                  • Size 475B
                                                                                  • SHA256 d339d7a5fcaff72292150f3c7db87a73caa396e23224b570e053c8bb96a3a897
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  IRIMG4.BMP

                                                                                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.BMP
                                                                                  • Size 451KB
                                                                                  • SHA256 64da5bd044908b2c3a725c5a55edec1644be498f41ea05d42a6ae8cd797f1d80
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  IRIMG4.PNG

                                                                                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.PNG
                                                                                  • Size 368B
                                                                                  • SHA256 3207283d0abc0dd36c0991b40a738247394bbc92e5696eb790a5c888a9f28106
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  uninstall.xml

                                                                                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                                  • Size 6KB
                                                                                  • SHA256 8f8d1858191c4ea9269fe9cea42892bfd40f10f4492c0e7296cb60d3af15a704
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  uninstall.xml

                                                                                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                                  • Size 21KB
                                                                                  • SHA256 71709795a391929964a490c1ed65fd3896202fdf3ad435e01288f9461de336bc
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  7f6bed7eef3a853d.customDestinations-ms

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\7f6bed7eef3a853d.customDestinations-ms
                                                                                  • Size 24KB
                                                                                  • SHA256 e6c6bf76c0c85c3612489a52a56f3f0ec2595d7e42c172fbe4a7abba1ea6376c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  7f6bed7eef3a853d.customDestinations-ms~RFe59af80.TMP

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\7f6bed7eef3a853d.customDestinations-ms~RFe59af80.TMP
                                                                                  • Size 24KB
                                                                                  • SHA256 8c47342a4a3b8dd21dd24a06ca2963052487765de7c156c52cd8797b1ce41882
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  settings.dat

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                  • Size 40B
                                                                                  • SHA256 84e9ae1fcdfc3d327edfde486c3c0128d64d59e6a050080766b57a4c7a733167
                                                                                  • MD5 SHA1 SHA512

                                                                                  0dd77d57-321f-4ea3-957a-bda7ae4db841.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\0dd77d57-321f-4ea3-957a-bda7ae4db841.tmp
                                                                                  • Size 12KB
                                                                                  • SHA256 7d2cf242c96622e970250382a3cd19de86153e29f44f983760d6cf006eaf6012
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  186285cd-a7db-40ee-bbf2-ca87b7d821ff.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\186285cd-a7db-40ee-bbf2-ca87b7d821ff.tmp
                                                                                  • Size 125KB
                                                                                  • SHA256 6953025342f1866f389def915373e0ae4d3bbe0c6a25935383a870a37c5f9a90
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  1d8e6b1f-0ff3-48bd-b723-6523d0fd16d1.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\1d8e6b1f-0ff3-48bd-b723-6523d0fd16d1.tmp
                                                                                  • Size 357B
                                                                                  • SHA256 8f00756a1e5722bec4a3f1612fbfaedf2471d5e9d5d4fdbd4a1d5aabb58c2064
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  957cbf16-7bee-4957-a0f1-c09a80732339.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\957cbf16-7bee-4957-a0f1-c09a80732339.tmp
                                                                                  • Size 171B
                                                                                  • SHA256 e602eef05fae125f525efd77de70f0c1cf3c725700795a44a398564f38081255
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  temp-index

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\temp-index
                                                                                  • Size 1008B
                                                                                  • SHA256 4dfb016df539fb86da5d1116a95522844de3079d454c099de9880f9165dae899
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  the-real-index

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                  • Size 48B
                                                                                  • SHA256 ba9af8ef4932dcea7014aebadce23f6b821687de67781fabc31909006632ec18
                                                                                  • MD5 SHA1 SHA512

                                                                                  CURRENT

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Scripts\CURRENT
                                                                                  • Size 16B
                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                  • MD5 SHA1 SHA512

                                                                                  reader_mode.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir6112_166987412\CRX_INSTALL\reader_mode.js
                                                                                  • Size 112KB
                                                                                  • SHA256 dd4d3dfbd760159952c05355fdc4bc738488fe02e0e8dc43704e2095b6c76c1e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  spotify_frame_interceptor.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\Temp\scoped_dir6112_166987412\CRX_INSTALL\spotify_frame_interceptor.js
                                                                                  • Size 5KB
                                                                                  • SHA256 442264acc3e319d41ee98a0df10538500eb7914b0be345689340c83cfec1be7d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  messages.json

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
                                                                                  • Size 2KB
                                                                                  • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  background.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
                                                                                  • Size 17KB
                                                                                  • SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  twitch16.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
                                                                                  • Size 370B
                                                                                  • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  twitch48.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
                                                                                  • Size 921B
                                                                                  • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  main.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_0\main.js
                                                                                  • Size 46KB
                                                                                  • SHA256 e1b3123f37dfe988a8a22427e98d06cdf472c23429f6277f68c6eeb1626cd54e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  background.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\1.2.335_0\background.js
                                                                                  • Size 365KB
                                                                                  • SHA256 5acb8f0a54c6774e0832d8ee9c7fac2dd593b1a74c89c5f4a9ba3f12d878ebcf
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  icon-57.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\1.2.335_0\icons\icon-57.png
                                                                                  • Size 863B
                                                                                  • SHA256 7a1ae78e7cb77b74cbaefa5b92ec32384761499375738898e71bd43f018f3a17
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  logo_128.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_128.png
                                                                                  • Size 7KB
                                                                                  • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  logo_16.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_16.png
                                                                                  • Size 653B
                                                                                  • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  logo_32.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_32.png
                                                                                  • Size 1KB
                                                                                  • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  logo_48.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_48.png
                                                                                  • Size 2KB
                                                                                  • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  logo_64.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_64.png
                                                                                  • Size 2KB
                                                                                  • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  service-worker-loader.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\service-worker-loader.js
                                                                                  • Size 49B
                                                                                  • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                                  • MD5 SHA1 SHA512

                                                                                  1423.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\1423.js
                                                                                  • Size 88KB
                                                                                  • SHA256 a09175bfa9a89ba07160d457c4d9c24b0c9e0a019ee8f99eb9eaf342252e58a3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  1622.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\1622.js
                                                                                  • Size 46KB
                                                                                  • SHA256 9480b6ec53c1b8d17385cc38878117fdf09c198ae51b84f9f7e6ad3647e6e2fd
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  1904.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\1904.js
                                                                                  • Size 8KB
                                                                                  • SHA256 991173842745dd32cd6c1f81f9f0f444586403eecb8116af5963f4014b6c387b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  2667.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\2667.js
                                                                                  • Size 92KB
                                                                                  • SHA256 c51f809319d1011836d066290648d08c65724e27ddb44cc0876f88d89849dd8a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  269.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\269.js
                                                                                  • Size 58KB
                                                                                  • SHA256 b6e239560bdb3553d0eedeb7a864273da95f4633e274af344d933c435e15a67d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  2934.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\2934.js
                                                                                  • Size 93KB
                                                                                  • SHA256 3ab28af7f12ba7557277a5480cb6d6f8a866d93f3f1263cc4a67b61547893231
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  3168.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\3168.js
                                                                                  • Size 52KB
                                                                                  • SHA256 6b39e5e390840dd56e2dbbf7c9d50cb1fa816addd211d0575ee3c0aea8a05980
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  326.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\326.js
                                                                                  • Size 83KB
                                                                                  • SHA256 1a4a463e87b52a9e8afc749ef8c14d1cffac548854b35c5ae271245c45a54dae
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  3513.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\3513.js
                                                                                  • Size 133KB
                                                                                  • SHA256 b8ab2cc14b22181f42d1d4f6e95f9090d1883fd3c470a77a03162c3610050491
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  3554.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\3554.js
                                                                                  • Size 430KB
                                                                                  • SHA256 bc8431e5204a7d41dbbaf67f09f74715a2f40dd186e4214b7bd45cbbab52a5d7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  3624.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\3624.js
                                                                                  • Size 52KB
                                                                                  • SHA256 0c742126a96f74e2f16dc4e7d2c3319d448d19351ac8514da386834e944a6d49
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  3642.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\3642.js
                                                                                  • Size 51KB
                                                                                  • SHA256 a0e91086f7bebbab3f6d0ec9ef8a0df29195e67a805cddc253c6bfa793b512a6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  3937.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\3937.js
                                                                                  • Size 71KB
                                                                                  • SHA256 d2d843727c4a3f153537ac33fd4788fbb7bedd63659ea791c81598bbc2d4a30e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  395.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\395.js
                                                                                  • Size 4KB
                                                                                  • SHA256 3f5faeabe9916dbe827ffa81fa05a0229c2397840ea77aa61092b1539dc62879
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  3995.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\3995.js
                                                                                  • Size 49KB
                                                                                  • SHA256 166f540f31076016e70a17a2638245664c9d4792006650ea64272a82885babda
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  4294.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4294.js
                                                                                  • Size 49KB
                                                                                  • SHA256 2908237fc429ff768c560b0e2af6a5216907997a0824e499ae6735493e7327c7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  4398.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4398.js
                                                                                  • Size 50KB
                                                                                  • SHA256 448003708a996e6901cdb3bc522ec637a584e2ab1a85e5dc51786ab293daa21a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  4583.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4583.js
                                                                                  • Size 51KB
                                                                                  • SHA256 092f1618296656a1356e64adce17bff61d618b54eea54f04baeff0ce14021f9d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  4669.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4669.js
                                                                                  • Size 48KB
                                                                                  • SHA256 e9e4c61c239a31344f29df325adad1557fe25566c5fb4203ace34ac4bdf82dbb
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  4696.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4696.js
                                                                                  • Size 144KB
                                                                                  • SHA256 b64fcab27f530caeb4172360ba5f7b1ba515f62c4d917040cd8eb5cc30427950
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  4730.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4730.js
                                                                                  • Size 80KB
                                                                                  • SHA256 8648113cef393b74fa410641b81df52eebdb386bbedba19a01f52601a1f0443a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  4829.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4829.js
                                                                                  • Size 67KB
                                                                                  • SHA256 edcac4bb70175687f2bae10f802921ccdb5f381f6e68e73bcede5a3d73d717fa
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  4958.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4958.js
                                                                                  • Size 51KB
                                                                                  • SHA256 3537796f60d426f5d26614726b39dd9da10ee6f256c243face5276d390e12357
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  4984.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\4984.js
                                                                                  • Size 380KB
                                                                                  • SHA256 a05255774dda5ca5ff07e772ea6f7e15795f479568eaeb4b7dab82bfeee056a3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  511.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\511.js
                                                                                  • Size 80KB
                                                                                  • SHA256 7a60dd43e607456a4e60407b5771ef359ab6989dd4e8bb158e270d2a61e271a0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  5336.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\5336.js
                                                                                  • Size 46KB
                                                                                  • SHA256 b1724146b6f98e6af7b08b56d23b3bf8b8faebb52527dcebecce87d027e6c653
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  5570.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\5570.js
                                                                                  • Size 46KB
                                                                                  • SHA256 884bfc4c4baed073577fd5fafff8255f7f325e29d599f26c7684d460e007e038
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  5649.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\5649.js
                                                                                  • Size 58KB
                                                                                  • SHA256 56703e042b0ce3505c0b67b9af31e3ab5fa3b15109bb182c9fa2578c50790199
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  5907.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\5907.js
                                                                                  • Size 46KB
                                                                                  • SHA256 b2118967b819006984c188b0eb257c7cb2c2620a66e897dd3c39c0d5a25b34a0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  6046.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\6046.js
                                                                                  • Size 46KB
                                                                                  • SHA256 6bbba078538ef52a641284f839020e7e6b8f311739e8df0e5d4474b04df41ede
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  6166.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\6166.js
                                                                                  • Size 67KB
                                                                                  • SHA256 85792f376b0ad02d76f2cef268c503e0ee3c59e3f710ec0c941e03bfa4861472
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  6214.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\6214.js
                                                                                  • Size 24KB
                                                                                  • SHA256 78ccc6feb9f778bc3a0fe6cf8757d184a9e98b1d5f107f29b1f488b5723787ed
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  6260.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\6260.js
                                                                                  • Size 49KB
                                                                                  • SHA256 463d4fae3c1f31e4e43f75f59725649479f0d7e5eb5d64b5b6a6cbdbda09ed32
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  630.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\630.js
                                                                                  • Size 54KB
                                                                                  • SHA256 df0fe8fc8fddbb9b800b8422f8020411f192b473762a437077a039e01994571e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  6777.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\6777.js
                                                                                  • Size 436KB
                                                                                  • SHA256 e96ff1c6040769fdf366f0ca2e5f6eef28e4295a1c9bb17a1437266bd9ce050e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  685.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\685.js
                                                                                  • Size 51KB
                                                                                  • SHA256 49890b99ac93d6446922ca9dff1eb2a19ec3952fedfcbd7c76263749617b228d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  6980.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\6980.js
                                                                                  • Size 49KB
                                                                                  • SHA256 7bf18bd0166101123968cea7c871afee7396ffd925f5f16e3f3e2f8edfd20e3f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  7090.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\7090.js
                                                                                  • Size 51KB
                                                                                  • SHA256 2f7bffb329523f229584ccf2c04df101d89770c6fbfbde2d25e1053bc1456d35
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  7103.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\7103.js
                                                                                  • Size 51KB
                                                                                  • SHA256 f1b534fa65313f66058c483c97390e50a60f57b11e2964f39f6107c657aca3a2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  7219.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\7219.js
                                                                                  • Size 56KB
                                                                                  • SHA256 0a590488e8e43cb46b0c5f354bc2e9a193c633df787b6a0e770ff516ce30ec42
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  7390.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\7390.js
                                                                                  • Size 48KB
                                                                                  • SHA256 efa85bfce179f96197176c5792f5d808569f04636471753fcbb83ce96076f422
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  7946.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\7946.js
                                                                                  • Size 51KB
                                                                                  • SHA256 066fd66a75e7a675f4b11c791ab112a4a4f0f8464a8ef3108a1b38852466af83
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  7997.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\7997.js
                                                                                  • Size 52KB
                                                                                  • SHA256 efc0a98569d74b68e37597f51d926a7c13d38f0ed22e6bb57e7790c03f7cf0e5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  8122.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\8122.js
                                                                                  • Size 8KB
                                                                                  • SHA256 282620bf33360eeedc20a3e22a28f723db83cbaee1c522a3f970dc36187bf6e2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  8345.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\8345.js
                                                                                  • Size 50KB
                                                                                  • SHA256 8d648b173a5268f646d7dd25d8f41a632542aa7e01a92d72071eceb5a12b64c7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  8395.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\8395.js
                                                                                  • Size 52KB
                                                                                  • SHA256 9ddd58f6b33d57efdf7ac1c31726ff45eb3da5ab417c5a2ddaf927ef69273426
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  8671.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\8671.js
                                                                                  • Size 51KB
                                                                                  • SHA256 34748d11dc2d6c927f3f45d2514805abea3269219c53e92972132342f3c019b3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  9025.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9025.js
                                                                                  • Size 42KB
                                                                                  • SHA256 5c5eb0498e2555faf995e5a0cd04a4a7e9a5a045574bb72f529e3f531d0eac0a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  9028.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9028.js
                                                                                  • Size 52KB
                                                                                  • SHA256 356adf63749eb936ad106429cfcb66d836202e6d6f76611680803230d10fe62a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  9135.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9135.js
                                                                                  • Size 23KB
                                                                                  • SHA256 0fe1091a430c7293d82d7a240b3944601492a8b021622775b5589e6dc4c509ed
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  9432.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9432.js
                                                                                  • Size 52KB
                                                                                  • SHA256 c8d159018576225aea5f55e5955fd1fccef8aebac0111ed50be91f2907fdf6e5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  951.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\951.js
                                                                                  • Size 67KB
                                                                                  • SHA256 76a83f2582ca0ff53a268e43bc4a9fcbfb4ce65f49d2cc7883057c9f63a3cf0d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  9600.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9600.js
                                                                                  • Size 51KB
                                                                                  • SHA256 8dd8e965c4b41fbd3c2d148d153cac80f4b6b019b79a3d7891d31d5822fc9334
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  9736.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9736.js
                                                                                  • Size 49KB
                                                                                  • SHA256 e0512c803de9d510e1b63f804a75995fc3875f81b16ada40131a602069993daa
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  9844.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9844.js
                                                                                  • Size 50KB
                                                                                  • SHA256 937568845cfb1960772d889fd619f65e4b89fa40adce439503380dc9d9068cc5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  9901.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\9901.js
                                                                                  • Size 50KB
                                                                                  • SHA256 b53a1c353e559c5f78bbab83643979081ae8d7d3bfbfda6a8491fbb098e9f8e4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  aria.html

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\aria.html
                                                                                  • Size 486B
                                                                                  • SHA256 e7dcbc2e0bbe6de18980b3093dd01930dd54f32a8fceaed8561069c7e83eeacd
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  aria.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\aria.js
                                                                                  • Size 6KB
                                                                                  • SHA256 38216ade3f67134cce9ffcb0c53d2878cc10084f8627428fbd2608f79d8d2a3c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  018d39b3bdda8041.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\018d39b3bdda8041.png
                                                                                  • Size 402KB
                                                                                  • SHA256 4cba43e087f6ee04c32854e8231da7a487e975cc29788776cac762a9a95a5585
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  045499a2e328133d.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\045499a2e328133d.svg
                                                                                  • Size 861B
                                                                                  • SHA256 70b9447762b68963f066c8de71bae342d4c3734f614d9f6ff4beb74c7b9e29ea
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  0561eac25d821104.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\0561eac25d821104.svg
                                                                                  • Size 779B
                                                                                  • SHA256 446715e6df1a2374bfff30544a99755ad6eca4c499e7311ff51fe68638d6992b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  059e8a27e58989ac.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\059e8a27e58989ac.svg
                                                                                  • Size 279B
                                                                                  • SHA256 a86f98c3f77841e716fedb8637f74b06892b1920eb868372178c1053029d9406
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  0647aa53f7a1ab03.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\0647aa53f7a1ab03.png
                                                                                  • Size 4KB
                                                                                  • SHA256 9651739b361d80c22490b05e1c370756327ad96a3893ea10b21043c01e1e3d89
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  07e5916f8c42413d.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\07e5916f8c42413d.svg
                                                                                  • Size 346B
                                                                                  • SHA256 316a84549860cd1dd865b4db4fb7403d46f56782738c30788c019b5b8d1505d4
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  0c065981a363e375.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\0c065981a363e375.svg
                                                                                  • Size 2KB
                                                                                  • SHA256 7ac85af03d05ac66458d94ad4442a5b64ce2ef29bc642d42d34237025855b3e2
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  0c31e8f306b5f2d6.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\0c31e8f306b5f2d6.svg
                                                                                  • Size 686B
                                                                                  • SHA256 ae5af18df50e69fd4fa99cdb32e4192524c6ec491e1da5a6496d5bb35bb33b9a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  0cbcfc6fe4cb443b.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\0cbcfc6fe4cb443b.svg
                                                                                  • Size 200B
                                                                                  • SHA256 1edbe3fa1e31ec007617a1eae760cb7fb3c68c4dc7ecac0bb635088763d51c3e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  0d0d0fdaeacb5e45.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\0d0d0fdaeacb5e45.svg
                                                                                  • Size 670B
                                                                                  • SHA256 0e05484cdf319c42cbcda83f3ab2ec3cee7942079992da158afa0760fc9b6f3f
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  103eff58785ab58b.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\103eff58785ab58b.svg
                                                                                  • Size 534B
                                                                                  • SHA256 ea28a57c2b4c803116566db0c483cc910a6ab9c725db874ff12569222b3d340a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  1046c13174d8b145.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\1046c13174d8b145.svg
                                                                                  • Size 653B
                                                                                  • SHA256 4c2332c75081ae314df7f476041d1b25aa718e7d943e36a31d46333208dcbedf
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  123ab2cc0ee9e515.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\123ab2cc0ee9e515.svg
                                                                                  • Size 22KB
                                                                                  • SHA256 0f0b994c8670200d3c137a916de9601812b414bd75cbad42f136d9f9d0c82bda
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  12e3fff4ce882c02.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\12e3fff4ce882c02.svg
                                                                                  • Size 706B
                                                                                  • SHA256 ca84cea75231be8426df1ddaa5c4902440419b43e92f6d5677ab3e9a919c9596
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  14e91cb3dc3fa6da.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\14e91cb3dc3fa6da.svg
                                                                                  • Size 467B
                                                                                  • SHA256 4c9290c24d3db4812a64e96509a46dced9fe3bb639c25e8882e2e662845332e8
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  1670e5d31a4fbef2.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\1670e5d31a4fbef2.svg
                                                                                  • Size 452B
                                                                                  • SHA256 f9122391c5df2eedd175f993bd89f589384d7b7222ffe0fc642e8fa42793fcc2
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  1688c4091f2a2e26.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\1688c4091f2a2e26.svg
                                                                                  • Size 2KB
                                                                                  • SHA256 f60f4f3a9a21fa2a0937e510ec3b858bff041b0559fa6cdfafe801c43fc8b220
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  17cbd66168518049.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\17cbd66168518049.svg
                                                                                  • Size 308B
                                                                                  • SHA256 9ab7570e0639a79235fa71e3bc496d9bc05dd4a74aae7f5dcd4bff3812623663
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  181d51d89dd58b1c.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\181d51d89dd58b1c.svg
                                                                                  • Size 619B
                                                                                  • SHA256 7022b29d52ca3620157810b76f3fd4665f728d1ede361afb15937c5793f43ac1
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  18b4316285d3185b.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\18b4316285d3185b.svg
                                                                                  • Size 6KB
                                                                                  • SHA256 e72e1f02c8cd530c46a4d756f41be3ec41c3c86ae290b73a27c0fdbe72a6a392
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  1c9159e6d6d5b88c.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\1c9159e6d6d5b88c.svg
                                                                                  • Size 1KB
                                                                                  • SHA256 4e6f66ab1e0836fd18a8ff605ec3b4d12a5bfc60062887c3850d434d33aba205
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  1c94572b8a82384e.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\1c94572b8a82384e.png
                                                                                  • Size 6KB
                                                                                  • SHA256 96ee3e674f0fda9b8a73c3c4242738468405aa0d7c04dc1a4d54e9e548a57a32
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  1eb51cb7434ba396.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\1eb51cb7434ba396.svg
                                                                                  • Size 2KB
                                                                                  • SHA256 c569f486ac99a73a4276a731ee171aaef40e27ec821e755faf50d2fe6f47785d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  1f8c89981dfc2af2.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\1f8c89981dfc2af2.svg
                                                                                  • Size 266B
                                                                                  • SHA256 dd5f359286947d808937b99b2e8e61fe14d96938524cb056ca42fbd05863357a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  2108d437d813d94a.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\2108d437d813d94a.svg
                                                                                  • Size 322B
                                                                                  • SHA256 6cafb6ce0b52ceaef8798eee7c818cfbee01cf91b1790106038d8500835fe345
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  211b3eed2dc9a97b.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\211b3eed2dc9a97b.svg
                                                                                  • Size 196B
                                                                                  • SHA256 bcd78b2da7cecb286b2cbfc6b86cae98d958ad7227f385fe58340a19984114c0
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  22d2121364e44949.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\22d2121364e44949.png
                                                                                  • Size 1KB
                                                                                  • SHA256 a5fce2fb360c19b93d2df2d1cd3adba1dc88c655bc51cbf6639fa0df61e67af6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  243e789a53847976.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\243e789a53847976.svg
                                                                                  • Size 585B
                                                                                  • SHA256 fce585879f0a3fc6103d7abbb4fe492f9051f47d6bf82fddaea6083748955e3c
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  253f1599e4c715f7.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\253f1599e4c715f7.png
                                                                                  • Size 10KB
                                                                                  • SHA256 944f79c9d166538e47eee1709dc35adceea233beed204491759f35f83b7c0fe4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  2dfdd8918d195c58.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\2dfdd8918d195c58.svg
                                                                                  • Size 6KB
                                                                                  • SHA256 16dc2921e1f5d89c99aac9914dc98eba54ffa2f4fcf7a942fc2356391c7a46b6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  2edf079df2181fc4.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\2edf079df2181fc4.svg
                                                                                  • Size 1KB
                                                                                  • SHA256 10fd7fdec3af7b54ed8ac68ca5f6b2426e00e86a34c12213810f9c3270dccc77
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  2f4d0c616cea0666.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\2f4d0c616cea0666.svg
                                                                                  • Size 589B
                                                                                  • SHA256 32499717ae28339dbbba06154107872c5769810f691d68db46d9409be5365127
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  31ba446b2ad075f0.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\31ba446b2ad075f0.svg
                                                                                  • Size 635B
                                                                                  • SHA256 ad2ef1213f1a7f67e875a5edb473da0879522ba9946fb2ebf53f226fc795da79
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  33bd9ebd264104a0.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\33bd9ebd264104a0.svg
                                                                                  • Size 2KB
                                                                                  • SHA256 978a0ac5cf228e0fcfbdb7f7058bb26f7c7c3183f58fe3b0e1dbf1ac13516e89
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  3607fe7f996c064b.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3607fe7f996c064b.svg
                                                                                  • Size 4KB
                                                                                  • SHA256 37ef05845a8c85f25659be2e12a0143d98e5bc605a954ad3baf1b84744bc51f3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  36bf914fc5de6f1a.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\36bf914fc5de6f1a.svg
                                                                                  • Size 3KB
                                                                                  • SHA256 231ceb827eaeda96d3f47c045ac59e23d40710cdfbde54945cd89ccff412aa12
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  37192a2a129f5ff9.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\37192a2a129f5ff9.svg
                                                                                  • Size 224B
                                                                                  • SHA256 aba7f75c37591227dfec88b8b83fe1e7700271192d2d38350d047a96a609fd8d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  3a2ea7738b340340.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3a2ea7738b340340.png
                                                                                  • Size 6KB
                                                                                  • SHA256 fbdb9fe48083d513b0b946b35a95a157c2434e817f0a11cb2d2963ff144b50c9
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  3b9545916efb17d9.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3b9545916efb17d9.png
                                                                                  • Size 3KB
                                                                                  • SHA256 8ba7bd78ad289a668c7d017266888b7fbf978525cfdfccbdba5f90084fee6dda
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  3c91fce8ee8453fd.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3c91fce8ee8453fd.svg
                                                                                  • Size 3KB
                                                                                  • SHA256 2725c1bf08181aab08cc46e8ed47467dddeafe891e310bf67fbfa148d91e1cdd
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  3c9e7cbca1e6a295.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3c9e7cbca1e6a295.png
                                                                                  • Size 4KB
                                                                                  • SHA256 fb0b1e92b7017f202702168117ee6e278708a06815294a796acc6cb4f8600558
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  3cc0c6f21a6016be.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3cc0c6f21a6016be.png
                                                                                  • Size 47KB
                                                                                  • SHA256 c4e06de6de100feb53ef5f43d038bb779b84d3ace33f38ca4d62e64463f34f3c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  3d5e7395e9ffbdbd.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3d5e7395e9ffbdbd.svg
                                                                                  • Size 537B
                                                                                  • SHA256 c314723545b36fdfd4c9c340095ed4a3c06367e630321b3bad8d61068cfe827e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  3dad3b5da9993b6c.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\3dad3b5da9993b6c.svg
                                                                                  • Size 767B
                                                                                  • SHA256 b4281b6b31da12dfce039b3c29ead495e4c3d4588b7f49e2d352070b2b80c893
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  40da13d190d51b3d.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\40da13d190d51b3d.svg
                                                                                  • Size 565B
                                                                                  • SHA256 5c62d6a5be206a51368b1a8f92dc7d12614f89306d21c73512bb42f596f5fe31
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  436b779e283e4cec.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\436b779e283e4cec.svg
                                                                                  • Size 304B
                                                                                  • SHA256 5ff297046ceba4068df96fedcd122d47010943085c278c3b1d66559a1dce096e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  467465eb8fa50b5b.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\467465eb8fa50b5b.png
                                                                                  • Size 4KB
                                                                                  • SHA256 5c427c31f74ac7b88a574c9822c95a75a330fa768ddb8f02b94ad5e3defcf644
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  48d7ceaf46faf1a6.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\48d7ceaf46faf1a6.png
                                                                                  • Size 16KB
                                                                                  • SHA256 1b530b8562aaba7d4c9bca32501696bd0473c1bd2b1281941779f48a9d75ff06
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  49c99c607978a8f1.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\49c99c607978a8f1.svg
                                                                                  • Size 343B
                                                                                  • SHA256 57f9b1c710d6d4e2e333df1ba9f4e285192fff0e7e7facc2e2950deba2da5f24
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  49f7d977039c303e.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\49f7d977039c303e.svg
                                                                                  • Size 1KB
                                                                                  • SHA256 b14c989ba44526446d5259189ad12e7bdd1261a8f7a6c95490ab30b69684de82
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  4a39a099362c32de.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\4a39a099362c32de.svg
                                                                                  • Size 477B
                                                                                  • SHA256 f49cbed3efadd4afb2ce84feb2844c7bca8ebb1388b29b160b2754d7e53d4bc9
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  4a903e15f57d70f2.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\4a903e15f57d70f2.svg
                                                                                  • Size 608B
                                                                                  • SHA256 582e51dbb3ad1f89b5cf9d9e6c0f760fca3c1e5a8684934ded51f819175b178a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  4cad3768b65a46fe.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\4cad3768b65a46fe.svg
                                                                                  • Size 8KB
                                                                                  • SHA256 83dadcbf80cb980a6a142a7f916305136ff8d44fa2b30444b04dc85bd862b076
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  51f491f244f5f86b.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\51f491f244f5f86b.svg
                                                                                  • Size 13KB
                                                                                  • SHA256 50d5932c16de127f00ac4d4e944510798787a7f3cea6f495f0d5f24d9bcbaad7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  52630788a25809fa.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\52630788a25809fa.svg
                                                                                  • Size 503B
                                                                                  • SHA256 2c4eff17d2184891f880027b9bb5eb9158bc69b69c7724085847cf6905fed97a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  535cb5713fe4ca16.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\535cb5713fe4ca16.svg
                                                                                  • Size 365B
                                                                                  • SHA256 2600be0ed823e560f4c93df470afec7ac95a1efa8898651e0190730695a67dcb
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  53d73708b13075be.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\53d73708b13075be.svg
                                                                                  • Size 1KB
                                                                                  • SHA256 3f95bf152dd430c7dca4f6d3e1c58376731eb3998c49caa567aab2741bf4e4e9
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  578e94e35aa16d97.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\578e94e35aa16d97.svg
                                                                                  • Size 2KB
                                                                                  • SHA256 90ac01ccda1d73a4076858bfdc567bc22a9100c55b83f6f1c411e917cdea0b66
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  581fa70608c7fb8c.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\581fa70608c7fb8c.svg
                                                                                  • Size 2KB
                                                                                  • SHA256 1e9f16d4e00e445a3ffd0c5e83301bea528c169e0dbe4fb2f0a2116f7ec3aba8
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  5bddb929efb23217.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\5bddb929efb23217.svg
                                                                                  • Size 813B
                                                                                  • SHA256 1d1c2f5a54824e3a71f6d31709d4d7cad656c328224a7936b5b67cb6957d1a4c
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  5d5360751452a836.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\5d5360751452a836.svg
                                                                                  • Size 6KB
                                                                                  • SHA256 1305f3b977b3dfd8018798fc496b76909014ff48183bb94710c6417741ed3b42
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  5d690726b5ef06db.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\5d690726b5ef06db.ttf
                                                                                  • Size 97KB
                                                                                  • SHA256 95837e182baeeada83368f7748db28357f0a1b75c6b84ff7065b5edf933c8e18
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  625b924eeceb153e.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\625b924eeceb153e.svg
                                                                                  • Size 3KB
                                                                                  • SHA256 f41e2968b2610bafbd81dff830cdc9f6362ffd14838ec74ce20b52d154af6d77
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  62b733d362f51663.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\62b733d362f51663.svg
                                                                                  • Size 505B
                                                                                  • SHA256 3033a3f8ba457ed2ad317685ed075f38e5ca78a861350f4729c9cb64611d8a48
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  62dc31e3f318054a.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\62dc31e3f318054a.png
                                                                                  • Size 4KB
                                                                                  • SHA256 6342e5e66aaff11a87b88bd2dedd38a1c23405778adb77710f494c83228a7a02
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  6327ab0f8e3c16d7.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\6327ab0f8e3c16d7.svg
                                                                                  • Size 37KB
                                                                                  • SHA256 9b4c1dbe8257876b21d1ec0a6e50b0ad408f1e1bb70cca9c09b7d0ad07ad4ef4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  634f72a779327aba.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\634f72a779327aba.svg
                                                                                  • Size 249B
                                                                                  • SHA256 9a3fbf6fb2d458eae45fbff9e36faede8305a76b1f09aef0123aae918b1504d1
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  692666c0b9f55408.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\692666c0b9f55408.svg
                                                                                  • Size 2KB
                                                                                  • SHA256 f24ecd9281c6b917fa5ac620fdbda865cd9989211b64d5e54f24ed3b4f389fda
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  6b1f3d57b04e487d.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\6b1f3d57b04e487d.svg
                                                                                  • Size 3KB
                                                                                  • SHA256 8502e540946b516dd25701f9a9ab2be74f14ab0248b8a381b02499c9e91afb8d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  6e3ebbcd0a39edc2.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\6e3ebbcd0a39edc2.png
                                                                                  • Size 4KB
                                                                                  • SHA256 dd42d346b5cf1d7174cd49882c035bd4822e4b813e53927e857bab438d66246e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  6e6472b3e10aeb93.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\6e6472b3e10aeb93.svg
                                                                                  • Size 224B
                                                                                  • SHA256 d0c0e652606ab8b51dad6a57141330141fd11a410ee9baa0f0c6033a11502918
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  6ef20e0ce2751205.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\6ef20e0ce2751205.svg
                                                                                  • Size 202B
                                                                                  • SHA256 1ad10d17d3d99d5cdd66aec44133e284f47d9474d76eff04693896e77e673903
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  6f76682df45e26ec.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\6f76682df45e26ec.png
                                                                                  • Size 40KB
                                                                                  • SHA256 9a39a3af854b47b0aa23e3fed83e09f6fd2eeac29d5e5aad160d76e094ddb812
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  700fa70309836a11.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\700fa70309836a11.svg
                                                                                  • Size 804B
                                                                                  • SHA256 91b1c6e46527889d2bdf4c542103f7a9b7f517eba1e5eb6bb18817c51febae74
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  7179a1df5787b209.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\7179a1df5787b209.ttf
                                                                                  • Size 95KB
                                                                                  • SHA256 405e73d41afb7e5906efce206a326af5c956f38e255f35421c260e861e599c59
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  717cc4781a98e1ef.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\717cc4781a98e1ef.svg
                                                                                  • Size 517B
                                                                                  • SHA256 d3a68e1933cef3dde3741fe0a35d3521d731ab4f51781b94d636497b67eb89d9
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  72c1fd3caec7d678.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\72c1fd3caec7d678.png
                                                                                  • Size 4KB
                                                                                  • SHA256 811214139ddf84ffa87833724528d3e109f2fd66fedf8004064ec4b8477c85e5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  72db340eafb58783.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\72db340eafb58783.svg
                                                                                  • Size 515B
                                                                                  • SHA256 d4735286d501aa072cbcc71ef7805d06398da367bbb3d9a884827d7eedf2ac40
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  74ab371d1003b3d3.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\74ab371d1003b3d3.svg
                                                                                  • Size 609B
                                                                                  • SHA256 e0b9e22259671c1d486c4bc77575f3d08c23d2476b5d75525239329498fefd3d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  74ef97b398a3165f.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\74ef97b398a3165f.svg
                                                                                  • Size 1KB
                                                                                  • SHA256 81d1f973976ed12e6d25c4ea758e88b024083871bc19f774b6fb1df72e153f54
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  77a9dc64dd93830f.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\77a9dc64dd93830f.svg
                                                                                  • Size 568B
                                                                                  • SHA256 1ca557b79f24e093d91478753655bdf9377c0eaa7665e882384c0a168c9a17a3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  77d97894772b8d2f.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\77d97894772b8d2f.svg
                                                                                  • Size 5KB
                                                                                  • SHA256 2679bf41033c426cdc8260adb99b351b234e8b8de764ad126659dcaee6020278
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  791eead8725e14fa.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\791eead8725e14fa.png
                                                                                  • Size 6KB
                                                                                  • SHA256 6bc5f3f9ca3b409c6124aecc4c3a666c9472f6c769994175870b6b794458b736
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  7bc841d9002787a9.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\7bc841d9002787a9.svg
                                                                                  • Size 573B
                                                                                  • SHA256 d7c91b330a747d8617bc87c8b6217325ffeed7f50fca124d6fe47429cec9aa4b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  7e16ca1274952ee7.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\7e16ca1274952ee7.svg
                                                                                  • Size 8KB
                                                                                  • SHA256 6531422220b89b50dc51f0c04ca3dc8bb3402c7d89bf63d89119e2b277acf0ed
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  7e28f70725b144c5.webp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\7e28f70725b144c5.webp
                                                                                  • Size 17KB
                                                                                  • SHA256 f011b0ad31fec9033752f9c406f352a6835b6f2821ef591404ca4a72fa4fbead
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  7fe0482b83201fc0.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\7fe0482b83201fc0.svg
                                                                                  • Size 750B
                                                                                  • SHA256 055bcaae2a14a4d012ea7ec758e2a5171412f7346da52c82e750c76c75f64d77
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  809a1e218234bed0.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\809a1e218234bed0.svg
                                                                                  • Size 1KB
                                                                                  • SHA256 ddf381ed309da6ec689983cac97396bc46ca8bf6895e4caa1ae8297fc3b18a27
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  823861837143cdc9.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\823861837143cdc9.png
                                                                                  • Size 3KB
                                                                                  • SHA256 fd11e4f3442db2eeadaffb5b404dc7fb043e60ff57760edcec2098a01cfe9b48
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  833aa64d0b4e0fae.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\833aa64d0b4e0fae.svg
                                                                                  • Size 25KB
                                                                                  • SHA256 7657944e8398514c563319c54cdbae80c74c07fe258d6d8bc05009ddbcb1ee0f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  83a9049d6e0cae5a.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\83a9049d6e0cae5a.svg
                                                                                  • Size 251B
                                                                                  • SHA256 00ed74d7462e2fd6246acd171f2df6dfc3a434f05136781e9f5cf8fe3a3251ed
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  85004375da840fda.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\85004375da840fda.svg
                                                                                  • Size 694B
                                                                                  • SHA256 b385cd1d778679fc5312217a0ecb1aa70c81b97981f898871c3a0b1d2e950373
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  86235b4464b5fafd.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\86235b4464b5fafd.svg
                                                                                  • Size 2KB
                                                                                  • SHA256 79058973147da9ae959eada5388b205cca8adc13787482267157004018c4e313
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  869ca107851f570d.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\869ca107851f570d.png
                                                                                  • Size 30KB
                                                                                  • SHA256 a8b29679f9ae04c818d8abad257b3de8fcf07924ef5cb14b998eb52fd1f2130f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  86f46fb860e9ed7a.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\86f46fb860e9ed7a.png
                                                                                  • Size 3KB
                                                                                  • SHA256 adef3224e62a8db8a5f0d7b6dd80df3b3ffc4abc03ed51a119fb1fed318c8644
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  878f446ee6de2255.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\878f446ee6de2255.png
                                                                                  • Size 7KB
                                                                                  • SHA256 5515a8451464f22c220ac7beb66bd2cdfb8b60a63ee2921d90e36aca9332bc80
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  87dc241b2c0177c7.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\87dc241b2c0177c7.svg
                                                                                  • Size 42KB
                                                                                  • SHA256 195b7cca25841a9745ece97fb1a20f17379e02f1bbee8df68259aa2578157499
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  881503b944af06d9.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\881503b944af06d9.svg
                                                                                  • Size 1KB
                                                                                  • SHA256 8b8b7b1d850ff7319857ccc9a683229617506f6fb60d9ec478ebdb488d457ae6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  885856d657cdfb17.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\885856d657cdfb17.svg
                                                                                  • Size 272B
                                                                                  • SHA256 7a0a881ca68c4ede97a7988ea9099ec1663718e1fb2cad856793a776bd94540b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  896669c7450ccc86.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\896669c7450ccc86.png
                                                                                  • Size 6KB
                                                                                  • SHA256 70327650ac97f7f1eb527848ae31b363f1c49b298b9c2f48abb1c5a0ae3a3015
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  8987293ae7ba4469.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\8987293ae7ba4469.svg
                                                                                  • Size 388B
                                                                                  • SHA256 260c7166ff9dd09523c168413274b0f01f14e09cdc85cd75437fbfd0553d6bc3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  8a62bca7498ca4cb.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\8a62bca7498ca4cb.svg
                                                                                  • Size 343B
                                                                                  • SHA256 8db5ec0d6a3202d7837433fb51a37f146fe9e17d46d881b9c6166cc223e937aa
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  8bf0bcc9a3301fbb.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\8bf0bcc9a3301fbb.svg
                                                                                  • Size 798B
                                                                                  • SHA256 ca36df9cd20e38a361265a3338d41898397f43ae61bc5953356b2dcb72d7bfe2
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  8bf79756f58263e4.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\8bf79756f58263e4.svg
                                                                                  • Size 3KB
                                                                                  • SHA256 50bd8be39e536e80d0e9cf731857749fa0689dd18fec8a8d6d7b767f6d82c816
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  8e2cf4504754d310.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\8e2cf4504754d310.svg
                                                                                  • Size 272B
                                                                                  • SHA256 178e3bd6928ffbc19687e48fac480e711f147ff2ef9b0e9b39f17fa9e52c97af
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  91ede6982d00ebc1.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\91ede6982d00ebc1.png
                                                                                  • Size 4KB
                                                                                  • SHA256 fddceb3e8f58e36954ec380e301e2653df8315941158262adb295c85ea8c58d4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  931d0abe7a9ac97b.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\931d0abe7a9ac97b.svg
                                                                                  • Size 485B
                                                                                  • SHA256 e4f65bc15816d84478fc8e67aaf2ea627fe4a5a6745f671d39e02737706e1730
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  96cc5bea8cfdcdd1.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\96cc5bea8cfdcdd1.svg
                                                                                  • Size 1KB
                                                                                  • SHA256 36488700d3357641fdce4ef5ddd0b0e8a70ea92d997e7899c97ec977022f333b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  96fa9a8683ad0a32.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\96fa9a8683ad0a32.svg
                                                                                  • Size 534B
                                                                                  • SHA256 ef4b7e503a3ebbbe173c71e57a7873602194dd5c1687a424b98f6b36516174aa
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  97e3abd934c12f4e.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\97e3abd934c12f4e.svg
                                                                                  • Size 2KB
                                                                                  • SHA256 d881de46dd3e77af8549f8ff60e826d0e8a41d2f598aba698ec595e58b974837
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  982d29750cf2efe8.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\982d29750cf2efe8.svg
                                                                                  • Size 1KB
                                                                                  • SHA256 276e3c7721aaa1a451ac87c0c75aaba7636725710742d78993c64e946c77084b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  9a23d988229f3c4f.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\9a23d988229f3c4f.svg
                                                                                  • Size 501B
                                                                                  • SHA256 ea91ccb62f0ffc02e271e6a5318aa82b69ef61177b8f56b965966c90d012cbbd
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  9b8afed344c17eb7.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\9b8afed344c17eb7.svg
                                                                                  • Size 196B
                                                                                  • SHA256 24cf5aed7c4d57067744a9785c0dad71155d1090b8de8ce44b9c1506d87280df
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  9fc4cb3c560c02fe.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\9fc4cb3c560c02fe.svg
                                                                                  • Size 190B
                                                                                  • SHA256 3d851f03777a7ef958c15b38eba255ad44e654275a9e594a328840cccee99f5f
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  9fd27840422642a9.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\9fd27840422642a9.svg
                                                                                  • Size 365B
                                                                                  • SHA256 7c1dd95fae58b545a40ff1ee264a97dc41428554d4259ff901d7a7ee4008c515
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  9fe4e4ead173d4dd.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\9fe4e4ead173d4dd.svg
                                                                                  • Size 643B
                                                                                  • SHA256 032a838269d065fc262c6156b2c132fc0d234d473021112d96ce78ac97aa8924
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  a0ee19f03b9940aa.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\a0ee19f03b9940aa.svg
                                                                                  • Size 227B
                                                                                  • SHA256 39938a98231b768d985fbe5abdea560bb2b5f31d7011e84be730d92d796d9542
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  a1a3ecb5c68b205c.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\a1a3ecb5c68b205c.svg
                                                                                  • Size 166B
                                                                                  • SHA256 1c90e13a94cb36e3061af78bba58216843b9511c9712d1b4b4b4517a24eec840
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  a49ea8daf7467bb0.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\a49ea8daf7467bb0.svg
                                                                                  • Size 599B
                                                                                  • SHA256 a9a5d95e4cc0a0e0ec5cdc8f986308cdda7d1d80992412f8881cfff65143e4d9
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  a58a2e93a4b54988.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\a58a2e93a4b54988.svg
                                                                                  • Size 304B
                                                                                  • SHA256 11f8d51df24951971552bcf6317d592b2920f73dcba177caa272b70b0627e5de
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  a658c46672ad28f5.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\a658c46672ad28f5.svg
                                                                                  • Size 198B
                                                                                  • SHA256 c7fd1566d975fd06461e0b3dc308e0d06a76f1f08f497670d7c6908a6b58d820
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  a7a18b10642bfd5f.webp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\a7a18b10642bfd5f.webp
                                                                                  • Size 7KB
                                                                                  • SHA256 a3cbb2fe889c660e3c2031f36e41dc48fa201b9345ecb62dc78317fe4e1131fe
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  a7dbf1405144b262.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\a7dbf1405144b262.svg
                                                                                  • Size 1KB
                                                                                  • SHA256 cc91055c156950e590c3484782daf4fd82da79a36c568739c7af88f7cc4793aa
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ac28779d03531772.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ac28779d03531772.svg
                                                                                  • Size 452B
                                                                                  • SHA256 22bd354a581ff101fd23929bd9b9d4f95e4e78ee7b61b02934c76d036bd8d215
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ad827c7ddb8dd0cb.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ad827c7ddb8dd0cb.svg
                                                                                  • Size 324B
                                                                                  • SHA256 689f991b5bfc36e706928b329f1c36cc51464bcb367b555f388cabac16ac7c91
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ae846f7eddd04278.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ae846f7eddd04278.svg
                                                                                  • Size 1KB
                                                                                  • SHA256 b29819aa59d21fdc24b45cf3546cce9c3b5a4151d970b1efe94f6d49ea9299b8
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  aeba9f15ecf7f43b.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\aeba9f15ecf7f43b.svg
                                                                                  • Size 224B
                                                                                  • SHA256 2e1900037f584a61efd75d74176733ec9722d9409bafbf8db37df79508ea11d6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  af5f97cd7e418012.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\af5f97cd7e418012.svg
                                                                                  • Size 973B
                                                                                  • SHA256 05f47fb3ffb7323bdbf6b397330229a7f32a3a1f2d17365e748f8777a82dd6c0
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  b294d3d2f70d508c.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b294d3d2f70d508c.svg
                                                                                  • Size 515B
                                                                                  • SHA256 e593d97979df385b1c6e2270af9a87bee796d70e7c84099ea449839bcba81008
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  b37bf551ac569d00.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b37bf551ac569d00.svg
                                                                                  • Size 939B
                                                                                  • SHA256 55369f30e6b56ea039d0e71e55aa81d85264efb57b231163c72060670fad713a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  b4e5db2f8e466503.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b4e5db2f8e466503.svg
                                                                                  • Size 534B
                                                                                  • SHA256 1278a6c6c37a0745eb9d3f919dc5aa19078b021a7360046cbfb7d3195f82bae0
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  b631c209ab478391.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b631c209ab478391.svg
                                                                                  • Size 913B
                                                                                  • SHA256 90e0f9b6b878cc11b47456104b02bffab635964bf58260f693356af8f680be7e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  b80fc20fe385bc09.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b80fc20fe385bc09.svg
                                                                                  • Size 870B
                                                                                  • SHA256 b8c1bd8dc96665c3656cc96cc02f5b91954d4b19d8016a0fd17badab678c4fbd
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  b87ddd7d399ff7d2.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b87ddd7d399ff7d2.svg
                                                                                  • Size 795B
                                                                                  • SHA256 ef2c417a4822198f775e6a043e815068d50597dab195a20c361f892ef453db87
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  b8ddd3b0a5acfb1f.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b8ddd3b0a5acfb1f.svg
                                                                                  • Size 916B
                                                                                  • SHA256 9fa8322e2025b75254a164876192790e0b99b33e1b8907c7f10852100909a642
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  b9e2526d946fd3cd.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\b9e2526d946fd3cd.svg
                                                                                  • Size 2KB
                                                                                  • SHA256 048bee5d83dae709f1ec6053ed1f37d2baeb3fbd81e471ae4c7416a492ccb166
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ba9bf1c3957e59f0.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ba9bf1c3957e59f0.png
                                                                                  • Size 10KB
                                                                                  • SHA256 d88cfe3f564100986936c848d6b7b3830942901c908b7a5a5c39150547af8753
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  bc4e54d6f0276d36.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\bc4e54d6f0276d36.svg
                                                                                  • Size 8KB
                                                                                  • SHA256 2a886f41916a813d93a2a17f230c10f6a714b92c85d2109eb0c5fd5c43c8364b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  bccd629ae7cb011d.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\bccd629ae7cb011d.svg
                                                                                  • Size 217B
                                                                                  • SHA256 f6dedb2e1102582c17b6a4424b86fe6181ae22f7c4a09015f1a1d2360830a831
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  be50ce6d9253a5a9.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\be50ce6d9253a5a9.png
                                                                                  • Size 30KB
                                                                                  • SHA256 41aa6176ec702cc098347a51403f0299c0209c8722999af957a04d6115517903
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  befe724adae4279e.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\befe724adae4279e.svg
                                                                                  • Size 297B
                                                                                  • SHA256 8cad02aaee30ae0131cf45f0c2127e4ffbd9e99a5a5877c5a23c3372c35ac6e1
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  c01afd7dfd61f804.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\c01afd7dfd61f804.svg
                                                                                  • Size 198B
                                                                                  • SHA256 ec4d631df4fa2114ffd8d9be28067aa58c8314e7efa6e9d4a6458b10e7e243cf
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  c2975b0d0a40a4fd.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\c2975b0d0a40a4fd.png
                                                                                  • Size 2KB
                                                                                  • SHA256 f6a35bdbdd9251aea9aaa2ef7e15ba466c39169b940424110bc0676de2d9ba7e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  c3c4018a4fd62a9a.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\c3c4018a4fd62a9a.svg
                                                                                  • Size 520B
                                                                                  • SHA256 78c13a1cabf0d0caab6c5dedcf2c0de5737a3fbeb14391d2e32366c19da3195d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  c57ac42a27678f77.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\c57ac42a27678f77.png
                                                                                  • Size 1KB
                                                                                  • SHA256 3a5d63fc899063db5eb8a48e421f52dead3e10031e1c8093425449df8ca32bbb
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  c5e2e5518ff4a597.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\c5e2e5518ff4a597.svg
                                                                                  • Size 884B
                                                                                  • SHA256 f144a22baba0ebd9eb2e0b8f9ec4203bb48f8d35a2e533994c427f9e90a463ad
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  c5ed42bd4f1a6974.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\c5ed42bd4f1a6974.svg
                                                                                  • Size 394B
                                                                                  • SHA256 d93b470b2fe89d945653c2bb3ae0a6c3b80164bdfd4774664e6260d599b790c9
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  c6b3624b8cf9684a.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\c6b3624b8cf9684a.png
                                                                                  • Size 3KB
                                                                                  • SHA256 f9658376f26164948ab72dca9692ac812d3420d8b7ec0dadd1fb09aff809653d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ccdd22e861d21d30.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ccdd22e861d21d30.svg
                                                                                  • Size 936B
                                                                                  • SHA256 a9026d4e66a703b1576160f9ac407d382c3301575c7f699bd6e78d46a4063253
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  cf9e121c611b5d0e.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\cf9e121c611b5d0e.svg
                                                                                  • Size 2KB
                                                                                  • SHA256 8eba6969e00d42f30a2b31881b43d6219f73288c381adf9d09659189d63bcfe3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  d05dd34996b64d16.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d05dd34996b64d16.svg
                                                                                  • Size 16KB
                                                                                  • SHA256 7d4c4169954fe742a59cd5c390f8fb362a82c7c4bc42942f8c8ef0eb29eda5b4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d065dd41270e47f7.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d065dd41270e47f7.png
                                                                                  • Size 4KB
                                                                                  • SHA256 356c07a3cf412098080594e9faf780f09581eb2ffd6bf2254405af8074651614
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d28440c6dc230bf9.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d28440c6dc230bf9.svg
                                                                                  • Size 290B
                                                                                  • SHA256 ec9362b2f09d1fd635057a48910bde5d75971169c9c4e3abdc8f7c21c16828bc
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  d2cf554ccc93ffff.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d2cf554ccc93ffff.svg
                                                                                  • Size 263B
                                                                                  • SHA256 95c04a4a17f3b696b617a0b3bc222d85410f10349bc7ee616cb6b937c9006718
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  d2e19878110efee6.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d2e19878110efee6.png
                                                                                  • Size 3KB
                                                                                  • SHA256 6c0b3e2a8ba624f2a859c4fd9939b89dfa37699cb6d92f1393881ecc74760c1b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  d46d147daa1d2f79.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d46d147daa1d2f79.svg
                                                                                  • Size 945B
                                                                                  • SHA256 6d10f336af16d43cef3b98c2506fadcbb2e4a96131433aaf1c0f782e93826324
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  d59a1307c364439b.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d59a1307c364439b.svg
                                                                                  • Size 674B
                                                                                  • SHA256 572e8b100f61e6802e561dc255c0cf5c7e7882cb2fad418e851838410ed68fc4
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  d78ba875312ee059.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d78ba875312ee059.png
                                                                                  • Size 17KB
                                                                                  • SHA256 cd09040e73647aa8edfb60dbd4c50b2bd462aa2fd0b0e8df205190a070051de6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  d7dc8f3dc0f234e6.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d7dc8f3dc0f234e6.svg
                                                                                  • Size 1KB
                                                                                  • SHA256 4147c78e34a2c7eba0d21dc26a45bc74d7459e73da4d18ee0d707acec09fff06
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  d841f4bcced2e8bc.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d841f4bcced2e8bc.svg
                                                                                  • Size 614B
                                                                                  • SHA256 bf1516f759e2e0a845425060a511e7fbf01b434e6ea7b52aeb0a2559ce34b0a8
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  d897a6873296312d.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d897a6873296312d.svg
                                                                                  • Size 234B
                                                                                  • SHA256 74def5cf4975a6c055fe5550dedaa0fe6c54e465d12b27f7dbc8aa2a7bb32aac
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  d9b97322b3dc4aee.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\d9b97322b3dc4aee.png
                                                                                  • Size 6KB
                                                                                  • SHA256 779291157f20990ddb9c6cfdd6181550cc7a31ae5ac25292d590eb20d2efa110
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  dcbb2fc627b41963.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\dcbb2fc627b41963.png
                                                                                  • Size 36KB
                                                                                  • SHA256 60884a555dcd360aef6f7ce8f8dcb66815376195ffd67740c7c239d87fe49424
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  defebccb46e071fb.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\defebccb46e071fb.svg
                                                                                  • Size 6KB
                                                                                  • SHA256 fbaa12b93ee17014b7c724abfa62545bf05e1dd805dfa6e5c1f51588142ac8d8
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  df04cc6b3471fe0f.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\df04cc6b3471fe0f.svg
                                                                                  • Size 494B
                                                                                  • SHA256 5b67a74696b0cf0d76c60192825453971991441b6a5b6ad62d4c5366815e2dff
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  dfcd56774003574f.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\dfcd56774003574f.svg
                                                                                  • Size 587B
                                                                                  • SHA256 2d26d211cd091e758241941a40d1eb57711712fcc3eb1d705eef32547d9a282b
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  e0355e3bf0f86483.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\e0355e3bf0f86483.svg
                                                                                  • Size 318B
                                                                                  • SHA256 e71096281ca6c7c1abb7c50e6fa2c3486f78b1dd4b5f5f5537f38bfefee317cb
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  e0753f4e4fd1f172.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\e0753f4e4fd1f172.svg
                                                                                  • Size 2KB
                                                                                  • SHA256 644b2a34a99a01eb62f923c483545c8ada2348ce5a0154dfecb8ebddd93dc7fc
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  e117838d3c5eda37.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\e117838d3c5eda37.svg
                                                                                  • Size 271B
                                                                                  • SHA256 b8adf2f0aeee2f2cc4cda4fecba7ba04db0043814c660d32c8ea92641d446762
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  e337c07cfdb9efce.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\e337c07cfdb9efce.svg
                                                                                  • Size 352B
                                                                                  • SHA256 405fb48c2c04f011f040a13623c3dd39a1905aab12b7070df47dfcfa70ec422a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  e8a8ba696fae21e8.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\e8a8ba696fae21e8.png
                                                                                  • Size 7KB
                                                                                  • SHA256 a9b90f8084a5ac0cbb4136dbb53eb6c163051046f06c61ca911cf67e24c9a462
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  e8bb6bfbe58f9668.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\e8bb6bfbe58f9668.svg
                                                                                  • Size 10KB
                                                                                  • SHA256 f195773404e0283872b84c104951749d80e678eefa8620bf91a72c8a15ce574a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  e95ff90adab8dab9.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\e95ff90adab8dab9.png
                                                                                  • Size 5KB
                                                                                  • SHA256 0eab88dde1bb6297c4da1fe29780391aed05f32b2d52bdd5cd02161ec061dec0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  ecc19831f5fd7269.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ecc19831f5fd7269.svg
                                                                                  • Size 891B
                                                                                  • SHA256 34ffafd6aed516226f8d012ebe517067f3e4a5d1c29a44adc63c64645e3b4bda
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ee302686425de6d1.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ee302686425de6d1.svg
                                                                                  • Size 1KB
                                                                                  • SHA256 d3010106cff7fc076de4f24f77aca90cd29ee94fd3675bb23f1107fe1817e88e
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  f0c9814d841afa42.webp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f0c9814d841afa42.webp
                                                                                  • Size 18KB
                                                                                  • SHA256 4fe7d9933cfc5daf877acb90887ae5e039209a7dd7e6be78cb67358734bc93cd
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  f156fe54a5a79b77.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f156fe54a5a79b77.svg
                                                                                  • Size 514B
                                                                                  • SHA256 511c586eb88a9c206735e3e3fba7aa46f07cbcd1b6e99be5eb885d803a05610d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  f3bcc22345312f8d.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f3bcc22345312f8d.svg
                                                                                  • Size 3KB
                                                                                  • SHA256 6614961bc63bed06c36336bbf9e319036b57fde7bba1120d6a6f3efe16aafe48
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  f45cbb00d6bb82cc.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f45cbb00d6bb82cc.svg
                                                                                  • Size 322B
                                                                                  • SHA256 d32b690b0525b4fa227dc01328f12cf5d6bf07bd2e8886cb839fde079e247419
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  f515140b598dd3f7.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f515140b598dd3f7.svg
                                                                                  • Size 481B
                                                                                  • SHA256 133df0cdeb44eecd6381f3f97c7edacba9956d9ae6de1902f7c5a988b9e8f123
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  f7b78d9433c9d476.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f7b78d9433c9d476.svg
                                                                                  • Size 406B
                                                                                  • SHA256 c3f7cbe95b88ab96679037aecc2a6fc59286b2f047d0b56b5777de5f27d7bbf3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  f7fc539ce7a13719.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f7fc539ce7a13719.svg
                                                                                  • Size 1KB
                                                                                  • SHA256 65d27f13b9a522ee5e6f21058684445eef0791866ef29fd0bd34d1f82c5ac538
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  f8695cbe3a95268b.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f8695cbe3a95268b.svg
                                                                                  • Size 870B
                                                                                  • SHA256 8f9307e7950595d6edd6b89f898ff848a6d95b8f37d39849b6faa31ae45f9dc8
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  f907caea9dc5c5af.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f907caea9dc5c5af.svg
                                                                                  • Size 1KB
                                                                                  • SHA256 6b250c1857cae345f3fb6c64f9a43302c86eb99e2e77941003398db5af0477d3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  f95f5a575299231b.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\f95f5a575299231b.svg
                                                                                  • Size 402B
                                                                                  • SHA256 306ed4c0b1c53e5fa313a3396dafda9ba506e3cc69e29f270b76affee5ae2e94
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  fc431416b1024934.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\fc431416b1024934.svg
                                                                                  • Size 2KB
                                                                                  • SHA256 31a2447cb28df6dd58aea512fcc054b455b4d1cb7a70a71eac4989aaa1d4e240
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ff8d935c2abdcdac.svg

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\assets\ff8d935c2abdcdac.svg
                                                                                  • Size 2KB
                                                                                  • SHA256 2e62797f1b6c866bd2c2a5d27889bf0fb093bd8a25bab5f9dc2690861994b767
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  blacklist.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\blacklist.js
                                                                                  • Size 76KB
                                                                                  • SHA256 8d20217d3963d9dc785c7758bc14af57ee92e5b151dddac858bbfb0d800f5384
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  common.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\common.js
                                                                                  • Size 2.1MB
                                                                                  • SHA256 69a4b408592c0d0b4ba5695850093dcb12373256b6aced8fd126283170a3f246
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  devtools.html

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\devtools.html
                                                                                  • Size 489B
                                                                                  • SHA256 fb9993c641b228e488b55001e611f05767f98674c16c5a4530d01327b1a24de0
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  devtools.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\devtools.js
                                                                                  • Size 280KB
                                                                                  • SHA256 3d2726903c748649fcaf215c81bb92a9eca5e8ce479e7c2db6bc3ba3e31e0728
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  favicon_opera_one.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\favicon_opera_one.png
                                                                                  • Size 2KB
                                                                                  • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  KaTeX_AMS-Regular.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_AMS-Regular.ttf
                                                                                  • Size 62KB
                                                                                  • SHA256 68534840bcfdd2bffb6f0e8deb48684dd01e7f04ea2813267577afb906de1d13
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_AMS-Regular.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_AMS-Regular.woff
                                                                                  • Size 32KB
                                                                                  • SHA256 30da91e84c893f875e252689faebdc590b2871145e8adc7f9a9d4dbd8ce0b251
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_AMS-Regular.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_AMS-Regular.woff2
                                                                                  • Size 27KB
                                                                                  • SHA256 0cdd387c9590a1a9f9794560022dbb59654a7d86f187aa0c81495ad42d3a7308
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Caligraphic-Bold.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Caligraphic-Bold.ttf
                                                                                  • Size 12KB
                                                                                  • SHA256 07d8e303ce4fc12b4bb54f1004170dd190a1f3db45d400fe68060df3e0897268
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Caligraphic-Bold.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Caligraphic-Bold.woff
                                                                                  • Size 7KB
                                                                                  • SHA256 1ae6bd7475590e97e7f145a89e09ccde322f7a6bc0b91607b1c8b8ee28290fed
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Caligraphic-Bold.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Caligraphic-Bold.woff2
                                                                                  • Size 6KB
                                                                                  • SHA256 de7701e42cf1f4cf0b766c03fb27977207eee2f4fd5d76fa82188406da43ea4c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Caligraphic-Regular.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Caligraphic-Regular.ttf
                                                                                  • Size 12KB
                                                                                  • SHA256 ed0b74372feefcbb9c0666b2e210da37b7e49fa7fbbf3eeb11db5f693dacfbb7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Caligraphic-Regular.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Caligraphic-Regular.woff
                                                                                  • Size 7KB
                                                                                  • SHA256 3398dd02302557a793f2863f88e02d96ce10df2abffa07c8e9fa90775116e65c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Caligraphic-Regular.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Caligraphic-Regular.woff2
                                                                                  • Size 6KB
                                                                                  • SHA256 5d53e70ad607c2352162dec9e0923fb54ecdafaccbf604cd8dcf7d00facb989b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Fraktur-Bold.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Fraktur-Bold.ttf
                                                                                  • Size 19KB
                                                                                  • SHA256 9163df9c7122432e6495b4229fa9071cf9ae86a758ae5efc4924ec2e1a6dbce1
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Fraktur-Bold.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Fraktur-Bold.woff
                                                                                  • Size 12KB
                                                                                  • SHA256 9be7ceb88004ab8ad124082246fbfcca4091e36385d4ec6ed1df67375dad50fb
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Fraktur-Bold.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Fraktur-Bold.woff2
                                                                                  • Size 11KB
                                                                                  • SHA256 74444efd593c005e3f4573b44524704c0af0a937fe911cca9e94068d0d140d3f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Fraktur-Regular.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Fraktur-Regular.ttf
                                                                                  • Size 19KB
                                                                                  • SHA256 1e6f9579e90e2cac37f8f60a597c436e075c114385652b7cbeb0dec0421291b3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Fraktur-Regular.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Fraktur-Regular.woff
                                                                                  • Size 12KB
                                                                                  • SHA256 5e28753be717dac97f559f49bc10be9cf3c124ddcabda6659d11cb68febc6463
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Fraktur-Regular.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Fraktur-Regular.woff2
                                                                                  • Size 11KB
                                                                                  • SHA256 51814d270d06ff0255dba0799994fa4d8c84d11f09951d47595f4abb1f3602dc
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Main-Bold.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Bold.ttf
                                                                                  • Size 50KB
                                                                                  • SHA256 138ac28d1663b3037e9c5f52371fa5c63d8324f4a38d22cd573e6ea3a3fd0cf8
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Main-Bold.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Bold.woff
                                                                                  • Size 29KB
                                                                                  • SHA256 c76c5d696297d51b9cb1639c7da4334f0e7dec81b42b11213b5e25ef671bb822
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Main-Bold.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Bold.woff2
                                                                                  • Size 24KB
                                                                                  • SHA256 0f60d1b897938ec918c8ce073092411baf9438f6739465693ff18b0f9d20b021
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Main-BoldItalic.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-BoldItalic.ttf
                                                                                  • Size 32KB
                                                                                  • SHA256 70ee1f64a20f2048c21940ef46d0144fd215baa953ca69afd1e31e98544f708f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Main-BoldItalic.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-BoldItalic.woff
                                                                                  • Size 18KB
                                                                                  • SHA256 a6f7ec0d846ac7ad975adb8959c37ed49b94acbc4ae436db9ce9e20287e4a64c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Main-BoldItalic.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-BoldItalic.woff2
                                                                                  • Size 16KB
                                                                                  • SHA256 99cd42a3c072d918f2f44984a807cf7aa16e13545fd0875fc07c6c65f99e715b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Main-Italic.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Italic.ttf
                                                                                  • Size 32KB
                                                                                  • SHA256 0d85ae7cc30f23790a7f1a58c4a112fdca8aae769b6ba11429af1d98b1b6cb3a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Main-Italic.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Italic.woff
                                                                                  • Size 19KB
                                                                                  • SHA256 f1d6ef86f3b11a528bd5185199bd2443ecb2b0dead96d88674b5a2c12be24bdf
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Main-Italic.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Italic.woff2
                                                                                  • Size 16KB
                                                                                  • SHA256 97479ca6cce906abc961ecac96faa5f9ca2e61b8e7670d475826bcdee9a7c267
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Main-Regular.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Regular.ttf
                                                                                  • Size 52KB
                                                                                  • SHA256 d0332f52868370fd83ae7fa46470f90c8f2eab2fcf12bc4f88080b340c95a830
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Main-Regular.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Regular.woff
                                                                                  • Size 30KB
                                                                                  • SHA256 c6368d87e8a1a3a5d337623d83d8dc4b868f242a9ad476237d6f8d1e0f168cdc
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Main-Regular.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Main-Regular.woff2
                                                                                  • Size 25KB
                                                                                  • SHA256 c2342cd8b869e01752a9321dc17213fc40d4d04c79688c1d43f2cf316abd7866
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Math-BoldItalic.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Math-BoldItalic.ttf
                                                                                  • Size 30KB
                                                                                  • SHA256 f9377ab0271cda59af24bcffbd46a4d0c8a3572ffafdbb38de2ad5ea7b0d5ee5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Math-BoldItalic.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Math-BoldItalic.woff
                                                                                  • Size 18KB
                                                                                  • SHA256 850c0af5c2238497febaf5e461d880bf458c341f42f4f330f1b1ab5698b1998e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Math-BoldItalic.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Math-BoldItalic.woff2
                                                                                  • Size 16KB
                                                                                  • SHA256 dc47344dbb6cb5b655c8460d561f4df5f501b90c804ad3c6cec65fe322351ab1
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Math-Italic.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Math-Italic.ttf
                                                                                  • Size 30KB
                                                                                  • SHA256 08ce98e51b04d58945a301e639e02b6998af29fdfd61a7b8afdd07bbfc479d4a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Math-Italic.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Math-Italic.woff
                                                                                  • Size 18KB
                                                                                  • SHA256 8a8d244581371912b8f3f5a23e2437cb2a59cd9bcaebb0346e722c05737a2571
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Math-Italic.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Math-Italic.woff2
                                                                                  • Size 16KB
                                                                                  • SHA256 7af58c5ec8f132a2ddde9027c6d7814decce4d3b822a11192a42a20e2e973264
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_SansSerif-Bold.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Bold.ttf
                                                                                  • Size 23KB
                                                                                  • SHA256 1ece03f79f95277d57dc7f6b435a74e1379b0d46104a8530286b60ff49369ea0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_SansSerif-Bold.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Bold.woff
                                                                                  • Size 14KB
                                                                                  • SHA256 ece03cfd83e22c212cdef66feb8442d25a083beb988db3f1883f3f9738d750ba
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_SansSerif-Bold.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Bold.woff2
                                                                                  • Size 11KB
                                                                                  • SHA256 e99ae51144bf1232efcc1bfe5add36262c6866b0faab24fa75740e1b98577a62
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_SansSerif-Italic.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Italic.ttf
                                                                                  • Size 21KB
                                                                                  • SHA256 3931dd81faed86ba021bb2bbdc36f5bed9a38d6b4f4077aca59b265aa1b02083
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_SansSerif-Italic.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Italic.woff
                                                                                  • Size 13KB
                                                                                  • SHA256 91ee67500cc0129aa0ace3ac5c61ff1692102f0f31d02b69347fba35dcb75bf2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_SansSerif-Italic.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Italic.woff2
                                                                                  • Size 11KB
                                                                                  • SHA256 00b26ac825e2095056396e0553b8ac26d3f8ad158c3826e28b4c45b385c4714a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_SansSerif-Regular.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Regular.ttf
                                                                                  • Size 18KB
                                                                                  • SHA256 f36ea897e19f4a2e571d1e900e4e3710e438deb05a842486045ba0a3e616a4ad
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_SansSerif-Regular.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Regular.woff
                                                                                  • Size 12KB
                                                                                  • SHA256 11e4dc8a6471ff6d6ee561d53d10fde8f7489e798257ff449c5d37c197435605
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_SansSerif-Regular.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_SansSerif-Regular.woff2
                                                                                  • Size 10KB
                                                                                  • SHA256 68e8c73ef42afd3ccec58bf0fba302cce448938e7fc020a5e31f8a952eee1342
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Script-Regular.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Script-Regular.ttf
                                                                                  • Size 16KB
                                                                                  • SHA256 1c67f068fea8bb09bf099c088b1cf64bd27516a6e07f4684344873564bb66a67
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Script-Regular.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Script-Regular.woff
                                                                                  • Size 10KB
                                                                                  • SHA256 d96cdf2b3bdd4d64a8fd5f74a4c467f123a8a73931cd435889f08ffaf9bf947a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Script-Regular.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Script-Regular.woff2
                                                                                  • Size 9KB
                                                                                  • SHA256 036d4e95149b69ff9bcc0cd55771efeb25ffa3947293e69acd78d5ac328c684b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Size1-Regular.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size1-Regular.ttf
                                                                                  • Size 11KB
                                                                                  • SHA256 95b6d2f1a50173bfedb8c63e1d1c99b10427d0a4df4201cb44513b226951a22b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Size1-Regular.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size1-Regular.woff
                                                                                  • Size 6KB
                                                                                  • SHA256 c943cc986384f59e86bea5fd7dc50a9c4dfe567a7c05eb40d6790720dead97c9
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Size1-Regular.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size1-Regular.woff2
                                                                                  • Size 5KB
                                                                                  • SHA256 6b47c40166b6dbe21a5dfca7718413f2147fd2399be1ba605d8ad39cedf25dfe
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Size2-Regular.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size2-Regular.ttf
                                                                                  • Size 11KB
                                                                                  • SHA256 a6b2099fb555c60e3a0db3a08842ebf1d732c6eb4e4bf44913613bed4fc4e39b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Size2-Regular.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size2-Regular.woff
                                                                                  • Size 6KB
                                                                                  • SHA256 2014c523c3210bcc166648c4d4cc57f05b747df07a24277bf71c51e67dc79e3d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Size2-Regular.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size2-Regular.woff2
                                                                                  • Size 5KB
                                                                                  • SHA256 d04c54219f9eaec6d4d4fd42dfb28785975a4794d6b2fc71e566b9cd6db842dd
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Size3-Regular.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size3-Regular.ttf
                                                                                  • Size 7KB
                                                                                  • SHA256 500e04d54f0d51666332c9d2089aa803be22aa878eca539e59fa53c6e522b082
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Size3-Regular.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size3-Regular.woff
                                                                                  • Size 4KB
                                                                                  • SHA256 6ab6b62e9b62dae2c00dd90f791bd10950be0ecc3490d7d6045f51c2e8fe0949
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Size3-Regular.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size3-Regular.woff2
                                                                                  • Size 3KB
                                                                                  • SHA256 73d591271b1604960cb10bb90fee021670af7297017e0e98480b332d11f51995
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  KaTeX_Size4-Regular.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size4-Regular.ttf
                                                                                  • Size 10KB
                                                                                  • SHA256 c647367d1dd4e162468717d020e1fc0f1dc5c26ebfdffbe55261713bf88c5877
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Size4-Regular.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size4-Regular.woff
                                                                                  • Size 5KB
                                                                                  • SHA256 99f9c6750b489c9462bf04900bd3f939df9b829339daaaaa99ef5495cdddea58
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Size4-Regular.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Size4-Regular.woff2
                                                                                  • Size 4KB
                                                                                  • SHA256 a4af7d414440a1c1790825cfb700cf9cf43b0f2c4b04f0ebc523011ad9853ec0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Typewriter-Regular.ttf

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Typewriter-Regular.ttf
                                                                                  • Size 26KB
                                                                                  • SHA256 f01f3e87d9c6a61c0c081ceb577abd864eb00a612f7ac1620dd6915fad2ef5aa
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Typewriter-Regular.woff

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Typewriter-Regular.woff
                                                                                  • Size 15KB
                                                                                  • SHA256 e14fed02b1aba7ce9f5afd5844b5d0321b22351febc720e0de8b8723527609f7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  KaTeX_Typewriter-Regular.woff2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\fonts\KaTeX_Typewriter-Regular.woff2
                                                                                  • Size 13KB
                                                                                  • SHA256 71d517d67827787cfabdf186914cc3358eda539e37931941f2b2fd4a21f68c0b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  handleReloadUI.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\handleReloadUI.js
                                                                                  • Size 4KB
                                                                                  • SHA256 fd2b0c555ae1308c04e9ee5c2e83c5b56303303ad55a6c227281612b8dd6a1b3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  html_preview_sandbox.html

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\html_preview_sandbox.html
                                                                                  • Size 3KB
                                                                                  • SHA256 84ef907a752006e3f061a3bf2afac9eba4522db4ef7a86d27265049e2f2b4c7c
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  manifest.json

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\manifest.json
                                                                                  • Size 3KB
                                                                                  • SHA256 6b70fc5772e6b7436d754cf27ee66729730979870b354f445a477b1ac8ffa685
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  neon_tab_update.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\neon_tab_update.js
                                                                                  • Size 6KB
                                                                                  • SHA256 69dbf1f5e8287e7e2b142303f430671f35dcd50d9274d318ff1ac9458886499c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  offscreen.html

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\offscreen.html
                                                                                  • Size 294B
                                                                                  • SHA256 a15cf99abbab3275ed29b1be9ddb30c379fe2b035c3ab8571ffb845da22d945c
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  offscreen.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\offscreen.js
                                                                                  • Size 12KB
                                                                                  • SHA256 510e7c22b6f8eabb055371d4e246949472547ba253b7fa5b18a85e3c0902948b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  operator_animations.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\operator_animations.js
                                                                                  • Size 8KB
                                                                                  • SHA256 9a27810e558da9004d6cb45c75526f36c388869e8d0119cff2f8c836730656a0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  operator_startpage.html

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\operator_startpage.html
                                                                                  • Size 844B
                                                                                  • SHA256 e11105c10babb037790554298c492ba4c84ccb93f327d4cb1fcc477d54d31da5
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  operator_startpage.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\operator_startpage.js
                                                                                  • Size 351KB
                                                                                  • SHA256 a63c90e575ba22e5baeff54ceda83d043d7ebbd0ab6a99e67573e4a4d0780496
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  prevent_new_tab_opening.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\prevent_new_tab_opening.js
                                                                                  • Size 7KB
                                                                                  • SHA256 ee9206cc52fb3b298ff506dd9f1427b889db1e8fbdaf4932d8eeff4f9d7fba1b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  prompt.html

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\prompt.html
                                                                                  • Size 443B
                                                                                  • SHA256 f54f339837e1b29646d56733bfa7945f10fd5372424a0055c5f8ae0504281815
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  prompt.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\prompt.js
                                                                                  • Size 11KB
                                                                                  • SHA256 e2767a1449d4e45fd88be3eee6a03ad7b1282e69450600e4f0b4fc0ef1c8f5cc
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  operator-scan.glsl

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\shaders\operator-scan.glsl
                                                                                  • Size 6KB
                                                                                  • SHA256 d5d880f6f3cd7180c2e97c5da22b59b11e01682f8af0d8b44e691da40f4b57e2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  vendors.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\vendors.js
                                                                                  • Size 2.3MB
                                                                                  • SHA256 6f4d8ca46d311713e81ccf685bf821cb6fbc86b98a4a86f94897084aae26a167
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  voice_capture_worklet.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.62.0.1_0\voice_capture_worklet.js
                                                                                  • Size 9KB
                                                                                  • SHA256 0f798788db49f2c397d8113ce08ea55c51017ad85330bd2ca5a53cce8dbb5c9c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  background.js

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.14_0\background.js
                                                                                  • Size 144KB
                                                                                  • SHA256 0f770704e2ff8de44b53ed7972b8a3e10f45e6289bfee8cae8cdcddbe7bdd416
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Icon_Light_Neutral.png

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.14_0\icons\128\Icon_Light_Neutral.png
                                                                                  • Size 2KB
                                                                                  • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  popup.js.LICENSE.txt

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.14_0\popup.js.LICENSE.txt
                                                                                  • Size 1KB
                                                                                  • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  rules.json

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.14_0\rules.json
                                                                                  • Size 839B
                                                                                  • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  MANIFEST-000001

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\chrome-extension_jifbgnmbgbdiedhdecealmlgmekpagde_0.indexeddb.leveldb\MANIFEST-000001
                                                                                  • Size 23B
                                                                                  • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                  • MD5 SHA1 SHA512

                                                                                  098bd0c5-3730-4c53-8df2-832a9620d137.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\098bd0c5-3730-4c53-8df2-832a9620d137.tmp
                                                                                  • Size 27KB
                                                                                  • SHA256 35f2a396e255a1ed1779b56fb097e46f6e17119c2ba84fe609a01cccbdfcc18c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  1b88400a-f4ed-4607-837e-243502b97542.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\1b88400a-f4ed-4607-837e-243502b97542.tmp
                                                                                  • Size 27KB
                                                                                  • SHA256 68c23af61ff2bbdb2e2eff18776c62cf64ed6ce0a9a12d1def8a2c884d09132c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  2e58966b-7b4e-4533-ad97-dcbe301492e3.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\2e58966b-7b4e-4533-ad97-dcbe301492e3.tmp
                                                                                  • Size 27KB
                                                                                  • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  874e0c76-0614-4d8c-b2cf-10821cae64d0.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\874e0c76-0614-4d8c-b2cf-10821cae64d0.tmp
                                                                                  • Size 27KB
                                                                                  • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  b004453a-2152-46ce-ba28-f50dbe058f5b.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\b004453a-2152-46ce-ba28-f50dbe058f5b.tmp
                                                                                  • Size 27KB
                                                                                  • SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  e1078c49-7429-4fe7-be47-d9bcefaa2145.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\e1078c49-7429-4fe7-be47-d9bcefaa2145.tmp
                                                                                  • Size 27KB
                                                                                  • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  ed977725-780c-4dfd-b60f-fa96b66beb53.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\ed977725-780c-4dfd-b60f-fa96b66beb53.tmp
                                                                                  • Size 27KB
                                                                                  • SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  Preferences

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                  • Size 12KB
                                                                                  • SHA256 92364de16e7aaed50a23cd7e0487c70d0d927bb2176e7829d9001996e3d4c265
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  ff38d6da-a44a-4a8e-919b-f6535ee44661.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\ff38d6da-a44a-4a8e-919b-f6535ee44661.tmp
                                                                                  • Size 72B
                                                                                  • SHA256 4f9959504b6d3545f635aecc65cfffc695261622d3070940b9f95a64c37d0e73
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  the-real-index

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                  • Size 552B
                                                                                  • SHA256 5f76cc32c49c672321860267dfcd544192f3a9df67978f81a316e2d06d65b3a1
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  72918939-305a-4a0d-b5ee-34441b1e199d.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\72918939-305a-4a0d-b5ee-34441b1e199d.tmp
                                                                                  • Size 11KB
                                                                                  • SHA256 72b72625d116669011f6633e91f81a684ebf48327df310c76179db054522299a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  ccb47f5a-9648-452e-88f2-d68d7d752fa3.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\ccb47f5a-9648-452e-88f2-d68d7d752fa3.tmp
                                                                                  • Size 10KB
                                                                                  • SHA256 07c4d03e8edac5b729f536192176465b523086d08f3f6c41ab5bccc35002de42
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  cfa21dd7-205c-40ba-bf4a-a2b0de4754a1.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\cfa21dd7-205c-40ba-bf4a-a2b0de4754a1.tmp
                                                                                  • Size 381B
                                                                                  • SHA256 631ca424bd1f7bc34f492326d1a85a48fff34315d7e532012e1e575b24f9f40d
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 733B
                                                                                  • SHA256 47512a481e6f52821523c8077505cf1209307c0e55006dc6d303016ae2087510
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 909B
                                                                                  • SHA256 86dc84a03bc60eadc489384ea47c3e49d1590e4089b4b451c82feda7b27a4dd6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 2KB
                                                                                  • SHA256 762eb3a62db5a0c89955f636937975708e33a1b56125886dcf8349b4316ab612
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 4f7c5798ca02f9fc46161ff6a454d75d68a4b52d948487f61e9fe6ea51450194
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 929bb6867efb53d7123f53ac2dd7a0714e0c7e23dd4c6036fc0046db466a2e11
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 10KB
                                                                                  • SHA256 ee8ee2237d8c73daa8c5ab63ffe1dad3a521429552a3b63c0b40aa1b553c183f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 10KB
                                                                                  • SHA256 dc45a39b39f7364c6789cb5cb9582630e6684e850ddd335cef627af6580bb754
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 10KB
                                                                                  • SHA256 27a46baf97e88e7263db18fa6895ca167a4f11092304f0ee9b6da59186e958ff
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 493B
                                                                                  • SHA256 0695a62834c19a477a2fad1362fe932c4bd9fab263701f339c13c59b839ad5e2
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 605B
                                                                                  • SHA256 95e1f518654373cc026471d182768178b7bbb3206d5ff20aad718521bcb91898
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 8347fb10e5e3a3c3f3d873f7a61d48394997cb3d93848d9626905fc55e5be1a4
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 76e97e290a9b2d3ded105b516a14d9e8aab185afaf64fda5d3f7ece95e7b7cc1
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 8e44d1869f0c77585ab349e6e8e84e2b2acd0fbecebf00636c7d3fba49d7ef95
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 f7749013857b140596db8783066c948fea3e86ee95876fa082ca089213991a18
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 917d9eac9d006f0de91a1e239a6618864720e0a680d36813d2365ef069ef82e6
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 692e69f06830bf685d77f66322713863e2b3b430f331800bf411109885e06d03
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 2a38824bfa87a8b3d39c8dbbb2f613debdb2f3d01acf04979f76de41b43c86d3
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 2d7f3726d2bbc09f47ca76677e36b8b8bad5a4f328f187ea346422257b4637e9
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 a548be226d53cf8de7e01da4a5a118e211e394a367f4f987e004637e9ae9f1f8
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 2KB
                                                                                  • SHA256 038bee433159218c1b94a4443b02f0bb97ccfb4abdcc9699771ec38e0ed4a23c
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 2KB
                                                                                  • SHA256 ea1c269cb5ef4b03ff38aec3d398ffa883a9610a974ce3c4b76efb67748afa1a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 2KB
                                                                                  • SHA256 0739171ecb4e6f98a98f46ba20f87c5850f86aca1e061ea7562fc0c8a8bb1314
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 2KB
                                                                                  • SHA256 86b389f25138aedab3f5c7d78bb8a49de0267ff9806c63b63a60d1f259030663
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 2KB
                                                                                  • SHA256 759a5a45abb147f3c7ea4dd60645d4feaac4605bf20b60b6300023e41ae11dfe
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 6b5881466c03e1c24e63ea9e8033551e81330dfa5ab9b3648d5ac99f49455c7d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 9KB
                                                                                  • SHA256 f1b9e9e13e8871550961b49c17a463d58cc1cbc997ce3d369a203779d7897fe7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 9KB
                                                                                  • SHA256 a678e3a1bb990e160487426b450e3c0432a9fb68b6a1076b53fa9d5a0990f6ab
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 10KB
                                                                                  • SHA256 45808567a9da92be086326a6f08964b5311ca2d291c2a5ecbbd5fd43d2209a93
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 10KB
                                                                                  • SHA256 7caba50d7b4a45bfb54f0ee5acbe39297b8d0d4c495010d1713cdeae86d11d56
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 11KB
                                                                                  • SHA256 cf8c262f46d633e8ef68850b74e5179fd9ee900363a95802a25446007c606b81
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 10KB
                                                                                  • SHA256 72c10f09cc57fe3f78404bc2331468414fc1eb92d3b51c741dad8d45f9dfcd50
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 11KB
                                                                                  • SHA256 60aee50c4e43d1d2e2391bfb702cad30f6a9cf0c59f478c90d5e86fd3bcebd6b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 11KB
                                                                                  • SHA256 e4410cb50eb682c6bb15e80f130d1a50527b7b0713ef28ad917123b6998e73ce
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 3312d14033c038e0f9356bf6146ca637aa55efc2ba7404d0d14c2e514d5049f0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 30da6f8a95525ad4904050d009baf4c0dc6fc2dbe09cde6cdaab7fe1c9dd56ad
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 2KB
                                                                                  • SHA256 a663f9078f3e18a1be6f1ff1c60ca55d87da831710480c59d068111d941a6507
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 10KB
                                                                                  • SHA256 332cbfe5fa83d5d8ba1927c96dcb0b92fed43f500cd27015f4942f73ccff8b36
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 10KB
                                                                                  • SHA256 9dbabe7b4e326f6ffbe8fad71e476bf0b623e0cc46f4d7ca1e93dceb44d5f77a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 11KB
                                                                                  • SHA256 82dad815c1597932bd9141063cf5d8096efd1483cade3c0e9311b54ce2338743
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 2KB
                                                                                  • SHA256 4a13e5be5816e3b6b598903164ae9beeba1957c3c16cc9abfde3a108a82a67d5
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 0a304fe5d0ee01975386e8cf54848f0d2e8f016dd0efaeaca628ec09f4994bb8
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 4735c5585570a0b0811f1ab9cb2d15a592a93e2d669620450507e4a56de06154
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 6a2d6b48e3a8fdb733cc420af51090b5e45ba6de44f1c8f49d0757d617019d23
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_56ffbc83-f0a4-46b7-b3fd-c641cf3db836.raw
                                                                                  • Size 10KB
                                                                                  • SHA256 16eb2137b2fb40b0ff76deac3827b2797ac12795c7eb9cfa980c8647373f89d3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  MANIFEST-000001

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\MANIFEST-000001
                                                                                  • Size 41B
                                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                  • MD5 SHA1 SHA512

                                                                                  bfb63850-c2d2-45b0-8333-10dd986d9b3e.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\bfb63850-c2d2-45b0-8333-10dd986d9b3e.tmp
                                                                                  • Size 162KB
                                                                                  • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  ssdfp6112.0.1932715581

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
                                                                                  • Size 455B
                                                                                  • SHA256 cd2c86d1f48f4e8a229a1f103efbee8dad03cbb977e5b099e344e3a1a4280183
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ssdfp6112.0.1932715581

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
                                                                                  • Size 1KB
                                                                                  • SHA256 9eb5c5697373964a993ad78cceabd11b597780d1da17faba98861043146ec128
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ssdfp6112.0.1932715581

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
                                                                                  • Size 2KB
                                                                                  • SHA256 f71e8446e5ad3da8b64c6f9e22862cbce9fc9251ae8a9f7717727eff34626b81
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ssdfp6112.0.1932715581

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
                                                                                  • Size 2KB
                                                                                  • SHA256 fd5e599c64d8ee1ab170f5b28447046effdd1136190093c7efcc52a23c698612
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ssdfp6112.0.1932715581

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
                                                                                  • Size 2KB
                                                                                  • SHA256 a62d188aa9a9a01006ac36373aa5917c21063a41577e448887d4723825a5f894
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ssdfp6112.0.1932715581

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
                                                                                  • Size 2KB
                                                                                  • SHA256 04f8e7e35ffe18c4ccbf249102efb04c31029fac8d148c13e2fdc76978a0ad82
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ssdfp6112.0.1932715581

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
                                                                                  • Size 2KB
                                                                                  • SHA256 7fa885e7e042d39be3afbb2e2fe2c07216137b6a428ad016c46f6221abefaf62
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ssdfp6112.0.1932715581

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
                                                                                  • Size 2KB
                                                                                  • SHA256 3a67c2137d7bb68d89ebb7a832c847034aeda3c0fe1207245f59f85668c75eca
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ssdfp6112.0.1932715581

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
                                                                                  • Size 2KB
                                                                                  • SHA256 5ab7a638bb8269d5e0e7660924cde302c1003a248ddc1e22b29bb3e7b41d0fed
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ssdfp6112.0.1932715581

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
                                                                                  • Size 2KB
                                                                                  • SHA256 358754d2c5b495769e7053a33d97edb3b7217a795c7f90ebeba566a8db8c7906
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ssdfp6112.0.1932715581

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.0.1932715581
                                                                                  • Size 517B
                                                                                  • SHA256 e7dca9885ff0ba2972497d8b6ef5208629a625c71c1b08a1513dd56ed04ef1d9
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ssdfp6112.1.1574869535

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.1.1574869535
                                                                                  • Size 200B
                                                                                  • SHA256 f2fe7cf87c04a09013b36f59a86681b2d44538e9e28f25b2548644ab92579aec
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  ssdfp6112.1.1574869535

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6112.1.1574869535
                                                                                  • Size 224B
                                                                                  • SHA256 d4a73c83830d6851284f037946c03f96f0fa0a8510ceb7a1e9f2d42e06df469a
                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                  data_0

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                                                                                  • Size 8KB
                                                                                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                  data_1

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_1
                                                                                  • Size 264KB
                                                                                  • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                  data_2

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
                                                                                  • Size 8KB
                                                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                  data_3

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
                                                                                  • Size 8KB
                                                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                  • MD5 SHA1 SHA512 SSDEEP

                                                                                  079e0224-cc3e-4a17-a745-109fb7b1afb0.tmp

                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\extensions_crx_cache\079e0224-cc3e-4a17-a745-109fb7b1afb0.tmp
                                                                                  • Size 13B
                                                                                  • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                  • MD5 SHA1 SHA512

                                                                                  Unconfirmed 649548.crdownload

                                                                                  • Path C:\Users\Admin\Downloads\Unconfirmed 649548.crdownload
                                                                                  • Size 25.5MB
                                                                                  • SHA256 0619bd07d3183a8ae0cb1be408c6ad32295d47ddd666b2d51edd4d5f5d211227
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                  memory/2524-1857-0x0000000000670000-0x0000000000C71000-memory.dmp

                                                                                  memory/2524-903-0x0000000000670000-0x0000000000C71000-memory.dmp

                                                                                  memory/2524-1001-0x0000000000670000-0x0000000000C71000-memory.dmp

                                                                                  memory/2524-838-0x0000000000670000-0x0000000000C71000-memory.dmp

                                                                                  memory/2524-837-0x0000000000670000-0x0000000000C71000-memory.dmp

                                                                                  memory/2524-2187-0x0000000000670000-0x0000000000C71000-memory.dmp

                                                                                  memory/2524-254-0x0000000000670000-0x0000000000C71000-memory.dmp

                                                                                  memory/2524-957-0x0000000000670000-0x0000000000C71000-memory.dmp

                                                                                  memory/2524-5564-0x0000000000670000-0x0000000000C71000-memory.dmp

                                                                                  memory/2524-979-0x0000000000670000-0x0000000000C71000-memory.dmp

                                                                                  memory/3136-2-0x000001D605180000-0x000001D6053F0000-memory.dmp

                                                                                  memory/3136-11-0x000001D603780000-0x000001D603781000-memory.dmp

                                                                                  memory/3136-12-0x000001D605180000-0x000001D6053F0000-memory.dmp

                                                                                  memory/5832-876-0x0000000000340000-0x0000000000937000-memory.dmp

                                                                                  memory/5832-2815-0x0000000000340000-0x0000000000937000-memory.dmp

                                                                                  memory/5832-958-0x0000000000340000-0x0000000000937000-memory.dmp

                                                                                  memory/6244-2099-0x00007FFB12F50000-0x00007FFB12F51000-memory.dmp

                                                                                  memory/6244-2100-0x00007FFB131D0000-0x00007FFB131D1000-memory.dmp