Overview

overview

8

Static

static

3

63c825cdc3...in.exe

windows10-2004-x64

8

63c825cdc3...in.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    128s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/10/2026, 01:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    63c825cdc37d8fda.bin.exe
  • Size 2.0MB
  • Sample261023-btnsfsg13z
  • SHA256 63c825cdc37d8fda0bc6f3c5edf820c9157582ac7641de9c991499c7576a71ef
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryinstaller

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Checks for any installed AV software in registry 1 TTPs 9 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

    Inno Setup installer

    installer
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Script User-Agent 1 IoCs

    Uses user-agent string associated with script host/environment.

  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\63c825cdc37d8fda.bin.exe
    "C:\Users\Admin\AppData\Local\Temp\63c825cdc37d8fda.bin.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4020
    • C:\Users\Admin\AppData\Local\Temp\is-3F9KU8CDMP.tmp\63c825cdc37d8fda.bin.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-3F9KU8CDMP.tmp\63c825cdc37d8fda.bin.tmp" /SL5="$40182,848247,840704,C:\Users\Admin\AppData\Local\Temp\63c825cdc37d8fda.bin.exe"
      2⤵
      • Executes dropped EXE
      • Checks for any installed AV software in registry
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Checks processor information in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      PID:4012
      • C:\Users\Admin\AppData\Local\Temp\is-8SFH7HI64C.tmp\component0_extract\cookie_mmm_irs_ppi_008_585.exe
        "C:\Users\Admin\AppData\Local\Temp\is-8SFH7HI64C.tmp\component0_extract\cookie_mmm_irs_ppi_008_585.exe" /silent /ws /psh:agiSfNghlJdd2dANuf5rObM2lgkk1v1if9VZ2QFBzmocqlP7vvvVv1iw2C8w5ZVwtVxGLsLepsNraWEsaE /cookie:mmm_irs_ppi_008_585_a
        3⤵
          PID:2848
          • C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\common\icarus.exe
            C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\common\icarus.exe /icarus-info-path:C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\icarus-info.xml /install /silent /ws /psh:agiSfNghlJdd2dANuf5rObM2lgkk1v1if9VZ2QFBzmocqlP7vvvVv1iw2C8w5ZVwtVxGLsLepsNraWEsaE /cookie:mmm_irs_ppi_008_585_a
            4⤵
              PID:2512
              • C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\avast-av-vps\icarus.exe
                C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\avast-av-vps\icarus.exe /silent /ws /psh:agiSfNghlJdd2dANuf5rObM2lgkk1v1if9VZ2QFBzmocqlP7vvvVv1iw2C8w5ZVwtVxGLsLepsNraWEsaE /cookie:mmm_irs_ppi_008_585_a /er_master:master_ep_bbc14b59-ddb7-448d-ae77-2b842389cbb6 /er_slave:avast-av-vps_slave_ep_199b33c1-63ff-44fb-bb81-90279bbd28cd /slave:avast-av-vps
                5⤵
                  PID:2544
                • C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\avast-suite\icarus.exe
                  C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\avast-suite\icarus.exe /silent /ws /psh:agiSfNghlJdd2dANuf5rObM2lgkk1v1if9VZ2QFBzmocqlP7vvvVv1iw2C8w5ZVwtVxGLsLepsNraWEsaE /cookie:mmm_irs_ppi_008_585_a /er_master:master_ep_bbc14b59-ddb7-448d-ae77-2b842389cbb6 /er_slave:avast-suite_slave_ep_3b1a5482-756e-4f80-aed5-20e1a692b2c3 /slave:avast-suite
                  5⤵
                    PID:3752
              • C:\Users\Admin\AppData\Local\Temp\is-8SFH7HI64C.tmp\component1_extract\OperaGXSetup.exe
                "C:\Users\Admin\AppData\Local\Temp\is-8SFH7HI64C.tmp\component1_extract\OperaGXSetup.exe" --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:operagx,utm.id:BjYV7x1Be8uqAia1wgkukkRkUCLHksO4A8H6tHbXdZAHCR9SbVDXkyWV46Bc2ryJmrzUmpYkrUW2gZe
                3⤵
                  PID:4136
                  • C:\Users\Admin\AppData\Local\Temp\7zS820E161A\installer.exe
                    C:\Users\Admin\AppData\Local\Temp\7zS820E161A\installer.exe --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:operagx,utm.id:BjYV7x1Be8uqAia1wgkukkRkUCLHksO4A8H6tHbXdZAHCR9SbVDXkyWV46Bc2ryJmrzUmpYkrUW2gZe --server-tracking-blob=ZTcxMDhmYWIwY2QxNjBkYjA0MWVjMGExZmEzMDY5MTZjMDIxNGY3NDNiZGE0MjFkMjAzYjM0NGVkMDZkOGI1Zjp7ImNvdW50cnkiOiJVUyIsImVkaXRpb24iOiJzdGQtMiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOiJvcGVyYV9neCIsInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yIiwidGltZXN0YW1wIjoiMTc5MjA2MjAwMy40NjcwIiwidXNlcmFnZW50IjoicHl0aG9uLXJlcXVlc3RzLzIuMzIuMyIsInV0bSI6e30sInV1aWQiOiJkNzEyOTFlNy0yOTFiLTQ5MjktOWUxZS1mYTU2MjY3NTcxNDgifQ==
                    4⤵
                      PID:2976
                      • C:\Users\Admin\AppData\Local\Temp\7zS820E161A\installer.exe
                        C:\Users\Admin\AppData\Local\Temp\7zS820E161A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x2a0,0x2a4,0x2a8,0x27c,0x2ac,0x7ff7bbec69d8,0x7ff7bbec69e8,0x7ff7bbec69f8
                        5⤵
                          PID:4512
                        • C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\installer.exe
                          "C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\installer.exe" --version
                          5⤵
                            PID:1260
                          • C:\Users\Admin\AppData\Local\Temp\7zS820E161A\installer.exe
                            "C:\Users\Admin\AppData\Local\Temp\7zS820E161A\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=2976 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_20261023022659" --session-guid=dc47f734-22b5-40e7-8cd4-21bcb2552fb1 --server-tracking-blob=NDE2MWU1YjgwYjgzMTFjYjJjYjUwODQ2MjA2MWIwOGFkZDIzNjk4M2QyNzJjNDFhYTYwOWNiZWY4Y2I2N2M0ZTp7ImNvdW50cnkiOiJVUyIsImVkaXRpb24iOiJzdGQtMiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhX2d4In0sInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTEiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzkyMDYyMDAzLjQ2NzAiLCJ1c2VyYWdlbnQiOiJweXRob24tcmVxdWVzdHMvMi4zMi4zIiwidXRtIjp7ImNhbXBhaWduIjoib3BlcmFneCIsImlkIjoiQmpZVjd4MUJlOHVxQWlhMXdna3Vra1JrVUNMSGtzTzRBOEg2dEhiWGRaQUhDUjlTYlZEWGt5V1Y0NkJjMnJ5Sm1yelVtcFlrclVXMmdaZSIsIm1lZGl1bSI6ImFwYiIsInNvdXJjZSI6ImFpcyJ9LCJ1dWlkIjoiZDcxMjkxZTctMjkxYi00OTI5LTllMWUtZmE1NjI2NzU3MTQ4In0= --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=0009000000000000
                            5⤵
                              PID:5760
                              • C:\Users\Admin\AppData\Local\Temp\7zS820E161A\installer.exe
                                C:\Users\Admin\AppData\Local\Temp\7zS820E161A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x298,0x29c,0x2ac,0x274,0x2b0,0x7ff7bbec69d8,0x7ff7bbec69e8,0x7ff7bbec69f8
                                6⤵
                                  PID:3412
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe" --backend --initial-pid=2976 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591" --session-guid=dc47f734-22b5-40e7-8cd4-21bcb2552fb1 --server-tracking-blob=NDE2MWU1YjgwYjgzMTFjYjJjYjUwODQ2MjA2MWIwOGFkZDIzNjk4M2QyNzJjNDFhYTYwOWNiZWY4Y2I2N2M0ZTp7ImNvdW50cnkiOiJVUyIsImVkaXRpb24iOiJzdGQtMiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhX2d4In0sInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTEiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzkyMDYyMDAzLjQ2NzAiLCJ1c2VyYWdlbnQiOiJweXRob24tcmVxdWVzdHMvMi4zMi4zIiwidXRtIjp7ImNhbXBhaWduIjoib3BlcmFneCIsImlkIjoiQmpZVjd4MUJlOHVxQWlhMXdna3Vra1JrVUNMSGtzTzRBOEg2dEhiWGRaQUhDUjlTYlZEWGt5V1Y0NkJjMnJ5Sm1yelVtcFlrclVXMmdaZSIsIm1lZGl1bSI6ImFwYiIsInNvdXJjZSI6ImFpcyJ9LCJ1dWlkIjoiZDcxMjkxZTctMjkxYi00OTI5LTllMWUtZmE1NjI2NzU3MTQ4In0= --silent --desktopshortcut=1 --install-subfolder=137.0.6036.65
                                  6⤵
                                    PID:2996
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x2a0,0x2a4,0x2a8,0x27c,0x2ac,0x7ff6c2ec69d8,0x7ff6c2ec69e8,0x7ff6c2ec69f8
                                      7⤵
                                        PID:5068
                                      • C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\assistant\assistant_installer.exe
                                        "C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                                        7⤵
                                          PID:1732
                                          • C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\assistant\assistant_installer.exe
                                            "C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x81b950,0x81b95c,0x81b968
                                            8⤵
                                              PID:1448
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                                              8⤵
                                                PID:3012
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xabb950,0xabb95c,0xabb968
                                                  9⤵
                                                    PID:1132
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                                                    9⤵
                                                      PID:3228
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                        10⤵
                                                          PID:3148
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9957d8ca8,0x7ff9957d8cb8,0x7ff9957d8cc8
                                                            11⤵
                                                              PID:4488
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                            10⤵
                                                              PID:4668
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9957d8ca8,0x7ff9957d8cb8,0x7ff9957d8cc8
                                                                11⤵
                                                                  PID:5636
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x1488348,0x1488354,0x1488360
                                                                10⤵
                                                                  PID:2620
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                    11⤵
                                                                      PID:1736
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9957d8ca8,0x7ff9957d8cb8,0x7ff9957d8cc8
                                                                        12⤵
                                                                          PID:1092
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                        11⤵
                                                                          PID:2780
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9957d8ca8,0x7ff9957d8cb8,0x7ff9957d8cc8
                                                                            12⤵
                                                                              PID:5532
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                            11⤵
                                                                              PID:1432
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9957d8ca8,0x7ff9957d8cb8,0x7ff9957d8cc8
                                                                                12⤵
                                                                                  PID:2076
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                                                                        7⤵
                                                                          PID:2692
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9957d8ca8,0x7ff9957d8cb8,0x7ff9957d8cc8
                                                                            8⤵
                                                                              PID:2576
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1588,i,6437533884222048198,17770512091176320131,262144 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1864 /prefetch:2
                                                                              8⤵
                                                                                PID:3808
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2004,i,7499557842843682312,14653316862239590014,524288 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2044 /prefetch:11
                                                                                8⤵
                                                                                • System Time Discovery
                                                                                PID:3404
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2432,i,4617541429804458054,8739487644066089124,524288 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2640 /prefetch:13
                                                                                8⤵
                                                                                  PID:6016
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2700,i,2330797338943844029,917909609597232412,524288 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2780 /prefetch:14
                                                                                  8⤵
                                                                                    PID:5204
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=2888,i,18050645674326179281,16068313050575974694,1572864 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=2960 /prefetch:1
                                                                                    8⤵
                                                                                      PID:5464
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2752,i,16617541558707214577,1343696603448091552,524288 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=2920 /prefetch:14
                                                                                      8⤵
                                                                                        PID:2096
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2764,i,13503187199069572956,14203227203286091870,524288 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=2940 /prefetch:14
                                                                                        8⤵
                                                                                          PID:4588
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2716,i,11971843320635888662,8289877269282433204,524288 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=2816 /prefetch:14
                                                                                          8⤵
                                                                                            PID:4888
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2728,i,5890869980398366066,6124442058970819242,524288 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=2836 /prefetch:14
                                                                                            8⤵
                                                                                              PID:5936
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2740,i,4959399095509400439,14468764255031598204,524288 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=2856 /prefetch:14
                                                                                              8⤵
                                                                                                PID:4632
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_gx_splash.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                                                                                                8⤵
                                                                                                  PID:4224
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4784,i,12631768235153475294,2108767169814257572,1572864 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4788 /prefetch:1
                                                                                                  8⤵
                                                                                                    PID:7472
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4960,i,11402605483502230321,11337686614395429827,1572864 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4968 /prefetch:9
                                                                                                    8⤵
                                                                                                      PID:7480
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5404,i,6479379315275969395,10650723226711336161,524288 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5500 /prefetch:14
                                                                                                      8⤵
                                                                                                        PID:8068
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5372,i,7855978276231642447,7567213721895893834,524288 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5564 /prefetch:14
                                                                                                        8⤵
                                                                                                          PID:8064
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5400,i,2209572109985406271,14841084777764649124,524288 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5568 /prefetch:14
                                                                                                          8⤵
                                                                                                            PID:8084
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5396,i,3376487026145135960,7051716360505693921,524288 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5608 /prefetch:14
                                                                                                            8⤵
                                                                                                              PID:8088
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6032,i,9836054597001704212,12588498326575005854,1572864 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6052 /prefetch:9
                                                                                                              8⤵
                                                                                                                PID:8
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6908,i,26310838909680241,5838986491128003458,1572864 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6976 /prefetch:9
                                                                                                                8⤵
                                                                                                                  PID:6976
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6696,i,12396726804918099197,1968082288994444624,1572864 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=7268 /prefetch:1
                                                                                                                  8⤵
                                                                                                                    PID:7516
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=6836,i,18047364371467899812,4851501249308871306,524288 --field-trial-handle=1868,i,10552326771301173763,12661689633402770787,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1872,i,14370094035179441043,17394521391548625072,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6024 /prefetch:12
                                                                                                                    8⤵
                                                                                                                      PID:7152
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\assistant\Opera_GX_assistant_137.0.6036.65_Setup.exe_sfx.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\assistant\Opera_GX_assistant_137.0.6036.65_Setup.exe_sfx.exe"
                                                                                                                5⤵
                                                                                                                  PID:2520
                                                                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\assistant\assistant_installer.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\assistant\assistant_installer.exe" --version
                                                                                                                  5⤵
                                                                                                                    PID:4520
                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\assistant\assistant_installer.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x81b950,0x81b95c,0x81b968
                                                                                                                      6⤵
                                                                                                                        PID:1400
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                                                                                                              1⤵
                                                                                                                PID:2536
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                                  2⤵
                                                                                                                    PID:5528
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9957d8ca8,0x7ff9957d8cb8,0x7ff9957d8cc8
                                                                                                                      3⤵
                                                                                                                        PID:4444
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                                      2⤵
                                                                                                                        PID:5144
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9957d8ca8,0x7ff9957d8cb8,0x7ff9957d8cc8
                                                                                                                          3⤵
                                                                                                                            PID:3572
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x2a8,0x2ac,0x2b0,0x284,0x2b4,0x1488348,0x1488354,0x1488360
                                                                                                                          2⤵
                                                                                                                            PID:4700
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                                              3⤵
                                                                                                                                PID:3136
                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9957d8ca8,0x7ff9957d8cb8,0x7ff9957d8cc8
                                                                                                                                  4⤵
                                                                                                                                    PID:2888
                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                                                  3⤵
                                                                                                                                    PID:616
                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9957d8ca8,0x7ff9957d8cb8,0x7ff9957d8cc8
                                                                                                                                      4⤵
                                                                                                                                        PID:3488
                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                                                                                                      3⤵
                                                                                                                                        PID:2604
                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ff9957d8ca8,0x7ff9957d8cb8,0x7ff9957d8cc8
                                                                                                                                          4⤵
                                                                                                                                            PID:4760
                                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                                      C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                      1⤵
                                                                                                                                        PID:204
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                                                                                                        1⤵
                                                                                                                                          PID:4932
                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x15c,0x160,0x164,0x158,0x168,0x7ff9957d8ca8,0x7ff9957d8cb8,0x7ff9957d8cc8
                                                                                                                                            2⤵
                                                                                                                                              PID:2748
                                                                                                                                          • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                                            C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                                            1⤵
                                                                                                                                              PID:6188

                                                                                                                                            Network

                                                                                                                                                  MITRE ATT&CK Enterprise v16

                                                                                                                                                  Replay Monitor

                                                                                                                                                  Loading Replay Monitor...

                                                                                                                                                  Downloads

                                                                                                                                                  uiLangRes.dll
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\1033\uiLangRes.dll
                                                                                                                                                  • Size 108KB
                                                                                                                                                  • SHA256 94f3295bf3ac4b0fbe73d65f661fc1b64ff421db25be17ad54ed566e50a528d1
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  aswArDisk.sys
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\Inf\x64\aswArDisk.sys
                                                                                                                                                  • Size 20KB
                                                                                                                                                  • SHA256 cf76975df9d6ba8572e891d94b5b6ab2ac76814aa88b46a8902b5fe5ff1cf25d
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  aswArPot.sys
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\Inf\x64\aswArPot.sys
                                                                                                                                                  • Size 247KB
                                                                                                                                                  • SHA256 02d1ba5b304c5d90b593731d1157c698849f662ad16d5aca2732ae7ae2d8a6fa
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Crypto++.txt
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\Licenses\Crypto++.txt
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 e668af8c73a38a66a1e8951d14ec24e7582fee5254dd6c3dae488a416d105d5f
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ICU.txt.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\Licenses\ICU.txt.ipending.1cfc0d6a
                                                                                                                                                  • Size 20KB
                                                                                                                                                  • SHA256 f155f8f66833bdc8e0479656256bfac1d66a9ec9df4aa56292308f522b4e3fa7
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  LUA.txt.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\Licenses\LUA.txt.ipending.1cfc0d6a
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 7732fa42ebc8652ee3300a086a068f6aa5008cfa0d14948b144e4b06c82efda7
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Xerces.txt
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\Licenses\Xerces.txt
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 d7e3eaf9a5ec61dd5f4065d252a2b0130c0e300ac3ac9cb307469e2a86ebbca7
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  cURL.txt
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\Licenses\cURL.txt
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 7c3794f6aa18b133dc86045d00f3d5894682084692a959ce521982eed4554f37
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  dnscrypt-proxy.txt
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\Licenses\dnscrypt-proxy.txt
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 e9bfbf4cd2bb60ea2982dc50dee92466a81a42de9b40e65c4ee17298646c7bce
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  intel_asm.txt
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\Licenses\intel_asm.txt
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 634788199f33637e3cc36c61e5272f72ccbdab87be0c07eaaaf487c5f4f1ce82
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  pugixml.txt
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\Licenses\pugixml.txt
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 e9c108afa89f5f9ef50484bb1c64a8d07d0c0bfce171df01840702ceeaec1e34
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  rapidjson.txt
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\Licenses\rapidjson.txt
                                                                                                                                                  • Size 4KB
                                                                                                                                                  • SHA256 60ab263d1868282cb8262199edf648c21e45b729a78c6768bc9c27214a673da0
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  unrar.txt
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\Licenses\unrar.txt
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 64578d53633622b31d19024184265f01d045b637da98fbd15ca81e39acfba63f
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  yara.txt.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\Licenses\yara.txt.ipending.1cfc0d6a
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 1e5a5eae04b378d12f93a3acf56dfdcac7005bdd67fe22d71c855f4e994e9928
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ashBase.dll
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\ashBase.dll
                                                                                                                                                  • Size 964KB
                                                                                                                                                  • SHA256 b1b61595babcd1b093da4b4c47f1086f021fa1a62483f3c60e647149137394a2
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ashQuick.exe
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\ashQuick.exe
                                                                                                                                                  • Size 547KB
                                                                                                                                                  • SHA256 66cbb27c4b4585653e0200d7e084cc1cda00c7c003d9f8be4c871c27ae79cf5e
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ashServ.dll
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\ashServ.dll
                                                                                                                                                  • Size 1.4MB
                                                                                                                                                  • SHA256 6af3dbd413f28de5ef9a5bdd73e492ecc13754d7f3bcee89a921cd18cc2a6661
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ic_detailed_card_protection.svg.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_detailed_card_protection.svg.ipending.1cfc0d6a
                                                                                                                                                  • Size 4KB
                                                                                                                                                  • SHA256 3b5ed02b88eaa61b73ca5eb74901e67b037c59bdab031b9e22446647e844d43a
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ic_detailed_ok.svg.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_detailed_ok.svg.ipending.1cfc0d6a
                                                                                                                                                  • Size 806B
                                                                                                                                                  • SHA256 21a1e92a73bd7279a341f01c988f5d888b3be62ddaaf987137e3be88fd3fc407
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ic_simple_scan_deep.svg
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_simple_scan_deep.svg
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 c9e144e28451f13fe062506b97806ed71f403d0a9eb2d61493022569f86fe28c
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ic_simple_scan_quick.svg.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_simple_scan_quick.svg.ipending.1cfc0d6a
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 383a2559ead250986f5e0a4064d87bd390a9cc9534e3fdba59017278b616e3df
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ic_simple_search.svg.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_simple_search.svg.ipending.1cfc0d6a
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 53266141eb315ca4a041b890355eb2adc86747ab26685920ceaa8b445d925809
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ic_simple_send_instructions.svg.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_simple_send_instructions.svg.ipending.1cfc0d6a
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 77e5f4f68f1594bd5e335bfe66806d0842af2618446bbe86e51ec4915a34bcff
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ic_simple_speed.svg.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_simple_speed.svg.ipending.1cfc0d6a
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 dde385702c92656f51aafcb18df86946db9d8fd210d960d86dd05d1066866f21
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ic_simple_status_critical.svg.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_simple_status_critical.svg.ipending.1cfc0d6a
                                                                                                                                                  • Size 832B
                                                                                                                                                  • SHA256 f634a0ef02da6aeb89add41ea17f13777b9caee25d6c999899ea2d1a84bdfb31
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ic_simple_status_critical_filled.svg.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_simple_status_critical_filled.svg.ipending.1cfc0d6a
                                                                                                                                                  • Size 642B
                                                                                                                                                  • SHA256 5be8a15bc651ebea89f61f98f1e3890504830616f8f1509a9aa53aa5f690db27
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ic_simple_webcam_shield.svg.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_simple_webcam_shield.svg.ipending.1cfc0d6a
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 da09c55a8db732f5401a1a2cef1ce0766259230d66096144b7cb18784629a2a1
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  i-s-714.svg.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\illustrations\dark\i-s-714.svg.ipending.1cfc0d6a
                                                                                                                                                  • Size 21KB
                                                                                                                                                  • SHA256 9c21a5bf49b93ec3c0cc8fe99e125c63ea9c7ec352e7585d6a1e3ddb8f45d1e7
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  i-s-714.svg.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\illustrations\light\i-s-714.svg.ipending.1cfc0d6a
                                                                                                                                                  • Size 21KB
                                                                                                                                                  • SHA256 00bba47ac741133ad521b28751156179994c2db0e02943c5737b6e78d90a1189
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  locale-en_GB.json.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\locale-en_GB.json.ipending.1cfc0d6a
                                                                                                                                                  • Size 1009KB
                                                                                                                                                  • SHA256 06c7b2904a438cd62348c742235be9e9c3c66c67b019896d8c4282e34ebc04d9
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  mainFont_light.css.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\mainFont_light.css.ipending.1cfc0d6a
                                                                                                                                                  • Size 112KB
                                                                                                                                                  • SHA256 957b326bb75c2001f04666f047d85cd84215c923f75af879d1caa21c13906249
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  AavmRpch.dll
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\x86\AavmRpch.dll
                                                                                                                                                  • Size 760KB
                                                                                                                                                  • SHA256 8ce0188144f8f78adf35600fda2cc3cfec0d1b80699e9af24bbef2ad88d4743c
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ashShell.dll
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\x86\ashShell.dll
                                                                                                                                                  • Size 1.3MB
                                                                                                                                                  • SHA256 9cd20a548aeaf0ca03725403f14f4255846ff8ae07e45c1c69606029f6a0de80
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  aswBrowser.dll
                                                                                                                                                  • Path C:\Program Files\Avast Software\Suite\x86\aswBrowser.dll
                                                                                                                                                  • Size 1.1MB
                                                                                                                                                  • SHA256 a9f590df492b48821f96c48487f83d5f2865d70d4c7a475041e3cb9d7ee26efa
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  OpenSans-Italic.ttf
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Avast\Fonts\OpenSans-Italic.ttf
                                                                                                                                                  • Size 207KB
                                                                                                                                                  • SHA256 a54dc8488f8193bf30c3820cf6f261f911f9d328d699e1a1b8042641554cec70
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  OpenSans-Light.ttf.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Avast\Fonts\OpenSans-Light.ttf.ipending.1cfc0d6a
                                                                                                                                                  • Size 217KB
                                                                                                                                                  • SHA256 cf5f5184c1441a1660aa52526328e9d5c2793e77b6d8d3a3ad654bdb07ab8424
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  RobotoCondensed-Bold.ttf
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Avast\Fonts\RobotoCondensed-Bold.ttf
                                                                                                                                                  • Size 138KB
                                                                                                                                                  • SHA256 28a1d37668b4cf94fff5256e9639f175baf4dd654ec84ba910485d38beefa6bd
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  proximanova-regular.otf
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Avast\Fonts\proximanova-regular.otf
                                                                                                                                                  • Size 107KB
                                                                                                                                                  • SHA256 31daba103891abf8b4d0537661117a8689c9ee5d91ee264f74e64ef1bb37a61c
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  config.ori.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Avast\fw\config.ori.ipending.1cfc0d6a
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 be79affc10f1d93f9ae438c6320feed7846bcb0950cd32e8a564eeb59203b6ea
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  macaddr.ori.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Avast\fw\macaddr.ori.ipending.1cfc0d6a
                                                                                                                                                  • Size 400KB
                                                                                                                                                  • SHA256 397c21a562d5824dd87e2c34a60f2b3e8b678d52a7bc7297ba5828e4d7b9cf4b
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  networks.ori.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Avast\fw\networks.ori.ipending.1cfc0d6a
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 130a4428ee45f3a17252aa797cfaa35d8e71070dcccbc6059b31eaa087c5f5f8
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ports.ori.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Avast\fw\ports.ori.ipending.1cfc0d6a
                                                                                                                                                  • Size 11KB
                                                                                                                                                  • SHA256 6c26bf93abfd6f2878b608f6169e46be2365644e9de78c0b9e3177f3d0aff0af
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  rules.ori.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Avast\fw\rules.ori.ipending.1cfc0d6a
                                                                                                                                                  • Size 38KB
                                                                                                                                                  • SHA256 c6cd6e597abdd5d181ba4a096aa7174d1ed5e008405ebfc60e50d938a40cdeed
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  templates.ori.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Avast\fw\templates.ori.ipending.1cfc0d6a
                                                                                                                                                  • Size 210KB
                                                                                                                                                  • SHA256 af1c2077d4cf67f864b204290a35e51809c4d8c5349d4ac8ca90c92374a1d6b2
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  servers.def.ipending.1cfc0d6a
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Cleanup\servers.def.ipending.1cfc0d6a
                                                                                                                                                  • Size 42B
                                                                                                                                                  • SHA256 d28867006eceed94995b6db166ada3cc80a7045bb640b3d6e23954bb417665eb
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  event_manager.log
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Icarus\Logs\event_manager.log
                                                                                                                                                  • Size 142B
                                                                                                                                                  • SHA256 1d2a100781b99a538c8892d58f5c63fb6d9afe49d5ab5dc05e2baf7e2731ba83
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  icarus.log
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Icarus\Logs\icarus.log
                                                                                                                                                  • Size 74KB
                                                                                                                                                  • SHA256 5aa2e1a5322c416e5122a91a4580990081f2ee2d95ebb05cb5b9793f82c0d8ca
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  icarus.log
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Icarus\Logs\icarus.log
                                                                                                                                                  • Size 82KB
                                                                                                                                                  • SHA256 afdcd3896918e4294452a2eee8e4a717d048bf910c7898c4d6dc7a298fc31cb2
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  reporting.log
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Icarus\Logs\reporting.log
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 58c60d9a07bcf0ab55b6331e1efea87a708befa24591385b64074d775b56d30b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  sfx.log
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Icarus\Logs\sfx.log
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 2c70492e10fdf3f72f2fbcf0c325b73a5bd163c18a10daee8087ab4a88c85372
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  sfx.log
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Icarus\Logs\sfx.log
                                                                                                                                                  • Size 13KB
                                                                                                                                                  • SHA256 238db7ffdf1fc1ee05678bb6443dac96d5d70d8b2457a23a66d296a59161d665
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  icarus.ini
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Icarus\avast-av-vps\icarus.ini
                                                                                                                                                  • Size 182B
                                                                                                                                                  • SHA256 313f170792e252ac6da732ec24987befe2161f44f4736157ede27c0f274b2640
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  icarus.ini
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Icarus\avast-suite\icarus.ini
                                                                                                                                                  • Size 8KB
                                                                                                                                                  • SHA256 92631014bcb936218184c288f6cd31dfae6e693bc22c2274b07530f928ac0ca2
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  icarus.ini
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Icarus\avast-suite\icarus.ini
                                                                                                                                                  • Size 781B
                                                                                                                                                  • SHA256 4777a01f9d2414c75ce71a7228b4e30f58bdb369de5f1f034f32969f752b56fa
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  temporary_proxy.ini
                                                                                                                                                  • Path C:\ProgramData\Avast Software\Icarus\settings\temporary_proxy.ini
                                                                                                                                                  • Size 278B
                                                                                                                                                  • SHA256 8e511706c04e382e58153c274138e99a298e87e29e12548d39b7f3d3442878b9
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  snapshot-new.baf
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
                                                                                                                                                  • Size 20B
                                                                                                                                                  • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  137.0.6036.65.manifest
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\137.0.6036.65.manifest
                                                                                                                                                  • Size 225B
                                                                                                                                                  • SHA256 4fc3f11f18f24cddf8ba040c914a1cace41e81eee15f34d4143a4be785bbb28a
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  150x150Logo.scale-100.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-100.png
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  150x150Logo.scale-100_contrast-white.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  150x150Logo.scale-140.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-140.png
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  150x150Logo.scale-140_contrast-white.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  installer.exe
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe
                                                                                                                                                  • Size 9.2MB
                                                                                                                                                  • SHA256 f79b9723e62a3cb69b94cbd762edc2eb94ddefa1d79823d760a0c5fd0299ccd7
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Opera GX Browser.lnk
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\Opera GX Browser.lnk
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 f8ff964c35b90f1610c7094b9bd0916185e8ac70747b18c1a6a3117c2079a199
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  additional_file1.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\additional_file1.tmp
                                                                                                                                                  • Size 3.2MB
                                                                                                                                                  • SHA256 cd8129a92e34618206b386216a307a768ba8770cb76b4c16a08b35ac23c1228d
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  assistant_installer.exe
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\assistant\assistant_installer.exe
                                                                                                                                                  • Size 2.5MB
                                                                                                                                                  • SHA256 d1bebcbda51c7869eebf33275e4b6c3d2b3d37df6fae74a0561cdf2dffb5b293
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  dbgcore.dll
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\assistant\dbgcore.dll
                                                                                                                                                  • Size 238KB
                                                                                                                                                  • SHA256 65a487c32b2b0fdb5a022a7ed54dcf6b6f8271985d50c45c432fc8acb1bdf115
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  dbghelp.dll
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\assistant\dbghelp.dll
                                                                                                                                                  • Size 589KB
                                                                                                                                                  • SHA256 2ec4dcc1209a7f59c9215c5d8f17d7b35a91b2faf84d63ca5666cb6b02e46050
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  installer_prefs_include.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\installer_prefs_include.json
                                                                                                                                                  • Size 258B
                                                                                                                                                  • SHA256 fe4902c7b2569980b294a95c4e37ff95557c7bbc20e3307d76494dd4032382a9
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  installer_prefs_include.json7f12f251-dc12-4661-8f0f-6278e146fd43.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\installer_prefs_include.json7f12f251-dc12-4661-8f0f-6278e146fd43.tmp
                                                                                                                                                  • Size 978B
                                                                                                                                                  • SHA256 da33879dc19647b41701a94f71372735bebd5ac32559c2df3e592f2310be4f91
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  installer_prefs_include.jsond95a746b-342e-4c64-b3f8-48dfc6b25b82.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\installer_prefs_include.jsond95a746b-342e-4c64-b3f8-48dfc6b25b82.tmp
                                                                                                                                                  • Size 273B
                                                                                                                                                  • SHA256 f9a9a85bcbf039e5c8693b69dca276bb0b2b5151bfec6a06865b7f98ae450fea
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  custom_partner_content.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdd294e9-a6dc-49a2-b614-a75feb05585a Opera GX Installer Temp\opera_package_202610230226591\resources\custom_partner_content.json
                                                                                                                                                  • Size 245KB
                                                                                                                                                  • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  installer.exe
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\7zS820E161A\installer.exe
                                                                                                                                                  • Size 9.2MB
                                                                                                                                                  • SHA256 407955bd8dc43601214a22c6696f6db8da9352eb0c13b38fbeb780a90755fc52
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  63c825cdc37d8fda.bin.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-3F9KU8CDMP.tmp\63c825cdc37d8fda.bin.tmp
                                                                                                                                                  • Size 4.1MB
                                                                                                                                                  • SHA256 abf15387f0ec73cde9f8ef40ddfa7f03d773b8b4da574480c602663a11ba0be2
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  100.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-8SFH7HI64C.tmp\100.png
                                                                                                                                                  • Size 42KB
                                                                                                                                                  • SHA256 2ddd50ca3bb30387c309b0a627cc14f2820352679caa1d59f0dd35aed9540453
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  101.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-8SFH7HI64C.tmp\101.png
                                                                                                                                                  • Size 152KB
                                                                                                                                                  • SHA256 2f116cdef55e05549d6f06913afe39a91b715b188e110188c7fbf7f5eb69b318
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  SUCCESS.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-8SFH7HI64C.tmp\SUCCESS.png
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 2b394e114deb3a0700c70feb80d74328c4c8668aa221b0e427de783d1ab8371e
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  component0
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-8SFH7HI64C.tmp\component0
                                                                                                                                                  • Size 782KB
                                                                                                                                                  • SHA256 4a59596213b8e401401fad6249213596400943f72f98d8810c48538374137f52
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  cookie_mmm_irs_ppi_008_585.exe
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-8SFH7HI64C.tmp\component0_extract\cookie_mmm_irs_ppi_008_585.exe
                                                                                                                                                  • Size 1.7MB
                                                                                                                                                  • SHA256 2ab4329fb77df9f5b70ac45d9fc005f019c8ef930eabf82e6a10052f9cbeec2d
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  component1
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-8SFH7HI64C.tmp\component1
                                                                                                                                                  • Size 4.0MB
                                                                                                                                                  • SHA256 589ba92abe3929479c8271d3117a5a00306d3be858a0c4cce2f1ec8140ac8ac8
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  OperaGXSetup.exe
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-8SFH7HI64C.tmp\component1_extract\OperaGXSetup.exe
                                                                                                                                                  • Size 4.0MB
                                                                                                                                                  • SHA256 97310a070472e8b34a5d26491b55a1c7dec758b12a26ab5264772d4366ca98be
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  image.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-8SFH7HI64C.tmp\image.png
                                                                                                                                                  • Size 136KB
                                                                                                                                                  • SHA256 c822ae38c2b6eb09229dc98550f1464381b8ce09541755d1b3a446f4cf947bdd
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  itunes-12.13.11.1-installer.exe
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-8SFH7HI64C.tmp\itunes-12.13.11.1-installer.exe
                                                                                                                                                  • Size 355KB
                                                                                                                                                  • SHA256 896f56582b364574925b5ae4f4b49ac04c464155ac952b325003b8e66959f596
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  settings.dat
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                                                                                  • Size 40B
                                                                                                                                                  • SHA256 7a98d7fddcc20004c4091bde3f7f9e3f4d68c6d270c3b6365007187a4a921792
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  data_0
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_0
                                                                                                                                                  • Size 8KB
                                                                                                                                                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                  Submit Download

                                                                                                                                                  data_2
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_2
                                                                                                                                                  • Size 8KB
                                                                                                                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                  Submit Download

                                                                                                                                                  data_3
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\DawnGraphiteCache\data_3
                                                                                                                                                  • Size 8KB
                                                                                                                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                  Submit Download

                                                                                                                                                  MANIFEST-000001
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
                                                                                                                                                  • Size 41B
                                                                                                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  SCT Auditing Pending Reports
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                  • Size 2B
                                                                                                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  Opera Custom Icon.icob3f0b34f-b875-4ab5-8b34-8c4dba43cddf.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Opera Custom Icon.icob3f0b34f-b875-4ab5-8b34-8c4dba43cddf.tmp
                                                                                                                                                  • Size 162KB
                                                                                                                                                  • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Shared Dictionary\cache\index
                                                                                                                                                  • Size 24B
                                                                                                                                                  • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  CURRENT
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Site Characteristics Database\CURRENT
                                                                                                                                                  • Size 16B
                                                                                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw
                                                                                                                                                  • Size 461B
                                                                                                                                                  • SHA256 15829ca9814cbd4546be79f55a7fe9b9485f7ca7bb98ec831c099dfedfd52b43
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw001257a3-cb51-4a88-80d5-e9d810b845e5.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw001257a3-cb51-4a88-80d5-e9d810b845e5.tmp
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 1efed4d59175ef57f4efb6999510fa6904f58ad458614edf3307e2551d47f7db
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw00ffce00-2b81-4f62-b4e4-f5fe355ef690.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw00ffce00-2b81-4f62-b4e4-f5fe355ef690.tmp
                                                                                                                                                  • Size 685B
                                                                                                                                                  • SHA256 70dc306b93b5ae7a38493bf889fbba40c8e5997486904ef2294e214276a2f898
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw029210f3-b3db-440a-b36a-840a85108f2f.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw029210f3-b3db-440a-b36a-840a85108f2f.tmp
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 6f3fc19d6aa30948cfbdf6ad04abcab26d9d29bfe00673c6f09ebba3b0dfd07b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw12dc8738-27ba-4dbd-9411-460fcbef2047.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw12dc8738-27ba-4dbd-9411-460fcbef2047.tmp
                                                                                                                                                  • Size 7KB
                                                                                                                                                  • SHA256 8daa47b63e17256bc03e32247b4e9e26c8abf98d8eb8ee37e648e0b1c0b387d8
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw144c5ba8-499f-409d-b2f6-7b399ae13e04.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw144c5ba8-499f-409d-b2f6-7b399ae13e04.tmp
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 356423f92781d33ab89f6fde82f0d479690c4a2e9e051da969c90c35dbd6b4d2
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw1f7eecc8-65e8-4b77-88ce-40c92776f37e.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw1f7eecc8-65e8-4b77-88ce-40c92776f37e.tmp
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 67d809d89b1a604435f9f46c69f90847017cf5a672d90c7fab7cb719852a26a7
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw205b0c91-5c06-4cdc-a4d2-4c66b0eccfbc.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw205b0c91-5c06-4cdc-a4d2-4c66b0eccfbc.tmp
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 b43cef7faab6831f0363a59d866e69f1f835cfa024f25735089bae9b8dfe2a5c
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw23c1f465-bf8f-4d34-97a5-605b0849cd6e.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw23c1f465-bf8f-4d34-97a5-605b0849cd6e.tmp
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 657013a8c10b4810f5a4afadf87953c78067490a2e9d723b197025bffa86a1be
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw5b3ce075-55dd-4eb6-ae09-b1bd3c7008a8.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw5b3ce075-55dd-4eb6-ae09-b1bd3c7008a8.tmp
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 b93f9a7e0abba5857c4a87fb0e915fbae5644052bbfd582bffdb88ef05646dcb
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw6783ce69-6946-4943-adf2-1cc126d24bbb.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw6783ce69-6946-4943-adf2-1cc126d24bbb.tmp
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 0ce64170e90d3629355bb4a3383bdddfe6db385d1139ea2edf79ad4ec70671e1
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw6b9f0097-f854-40fd-bca0-fbed07c326d6.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.raw6b9f0097-f854-40fd-bca0-fbed07c326d6.tmp
                                                                                                                                                  • Size 573B
                                                                                                                                                  • SHA256 f9b7e9664b2b20391202a6918b1f166efda43b2525295ebef2d7ef89ca2883c2
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawaaf56a69-d595-4eb3-9fb8-e54125652c3e.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawaaf56a69-d595-4eb3-9fb8-e54125652c3e.tmp
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 ac1bd24f25f6a34977a4cfd90d17206f78b46fd6aff37ec8c9235e89d808166f
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawb1753af7-a0a0-485f-a827-168b7272f2d1.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawb1753af7-a0a0-485f-a827-168b7272f2d1.tmp
                                                                                                                                                  • Size 7KB
                                                                                                                                                  • SHA256 700899490a84171954451e864b729741fe4199e8f65e9c4a64398ad4bd285f60
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawb5d5c984-4a41-46c6-b28c-b1ee2fe086ef.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawb5d5c984-4a41-46c6-b28c-b1ee2fe086ef.tmp
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 fdd7f8423b05cbb59a5055cb4b4a7318e710dd92bff180e4bbd5864a6b57e6f7
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawc203744f-e4ed-4cb6-921b-9b83b4ad40dd.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawc203744f-e4ed-4cb6-921b-9b83b4ad40dd.tmp
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 6bfb3ee9a19abd728569e73027ae628b582d747002aa212ebc503cc8217cf443
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawd63ffa87-4dc9-4b8b-89d7-8e41fee30617.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawd63ffa87-4dc9-4b8b-89d7-8e41fee30617.tmp
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 13a747aa309e4d157a475e97e9fe8e3d0fafbee5819eec3d6fdb3e435b93154c
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawe015d1b1-b470-4765-b2ce-68cc7a682bd5.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawe015d1b1-b470-4765-b2ce-68cc7a682bd5.tmp
                                                                                                                                                  • Size 7KB
                                                                                                                                                  • SHA256 5c23f9ad5209e981c31c498062b74535977b8d3398353baac549716f07a9abec
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawf4c8a502-a673-439a-90ca-a8ac00b68721.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawf4c8a502-a673-439a-90ca-a8ac00b68721.tmp
                                                                                                                                                  • Size 1005B
                                                                                                                                                  • SHA256 064707bb036a2249ce794ad7084c3751a14337cb1ec41fa446a17410cdcddc4b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawf6a9d8bf-1544-48e2-a890-ae0177378ed7.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawf6a9d8bf-1544-48e2-a890-ae0177378ed7.tmp
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 ace756135b53633c00dd05e5b3d9dc5b8d7121961997ed15e41b07ef23135c3c
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawf80ab276-61ed-457c-85a1-ad27ece9e017.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawf80ab276-61ed-457c-85a1-ad27ece9e017.tmp
                                                                                                                                                  • Size 813B
                                                                                                                                                  • SHA256 ab8d6e10bac8b2ea139a5f1db895251b305dddcf32a6493aecf15a57be9c3b19
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawfbc3933e-a2d7-4a9d-ba7b-19aed8479284.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_0ff85214-f1a6-4fa8-9180-53d6f43e4d84.rawfbc3933e-a2d7-4a9d-ba7b-19aed8479284.tmp
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 3d02f19c1eba4e2359ad407d6947a788725af2e8c7d201e906548618669154c3
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp2692.1.11824183561fe65584-0392-4cd0-8303-9d8734baf315.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2692.1.11824183561fe65584-0392-4cd0-8303-9d8734baf315.tmp
                                                                                                                                                  • Size 279B
                                                                                                                                                  • SHA256 c9f5f17cbeb8d282634dae6f264759925976999652880a73c13e5ffba33fcfe5
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp2692.1.118241835691ae8bca-1053-4135-8099-788ba0d6887b.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2692.1.118241835691ae8bca-1053-4135-8099-788ba0d6887b.tmp
                                                                                                                                                  • Size 224B
                                                                                                                                                  • SHA256 1221c95cb826eff058b14a81afe8982278a338354d975417076533b0fb1dfbfe
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp2692.1.1182418356ef10c084-184a-4956-bff4-f2f3e51919f6.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp2692.1.1182418356ef10c084-184a-4956-bff4-f2f3e51919f6.tmp
                                                                                                                                                  • Size 224B
                                                                                                                                                  • SHA256 fa36ff5b790688fee64d4d245dc4f0f403fc554816986878f4b93aaad5557fa9
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  data_1
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_1
                                                                                                                                                  • Size 264KB
                                                                                                                                                  • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                  Submit Download

                                                                                                                                                  VariationsSafeSeedV27c46a184-e431-46c0-818e-ef5f3130987b.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSafeSeedV27c46a184-e431-46c0-818e-ef5f3130987b.tmp
                                                                                                                                                  • Size 19B
                                                                                                                                                  • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  VariationsSeedV2e3469ac5-7b4c-434b-b13d-3c2413fef94d.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSeedV2e3469ac5-7b4c-434b-b13d-3c2413fef94d.tmp
                                                                                                                                                  • Size 11B
                                                                                                                                                  • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  icarus_product.dll
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\avast-av-vps\icarus_product.dll
                                                                                                                                                  • Size 1.4MB
                                                                                                                                                  • SHA256 8b51c1aece63f4918e04613aa39ed586f49d45afb5e0ca353f975547bcc40133
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  product-def.xml
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\avast-av-vps\product-def.xml
                                                                                                                                                  • Size 66KB
                                                                                                                                                  • SHA256 081663a948c0c6dcc3d08f8964e22d8bbfed9a1402f4082e54ad5618fcbd019c
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  product-info.xml
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\avast-av-vps\product-info.xml
                                                                                                                                                  • Size 5KB
                                                                                                                                                  • SHA256 30aa6362838d81c52aa605c707d1db53347e9abe8b7fb863dfbc12374876793b
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  policy.def
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\avast-suite\brandingdata\av\licensing\policy.def
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 4a32ed196f5532592dd77f7606f0f57fb13bdb9f8f2b5ae29eb05ea33ad69ba3
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  policy.def
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\avast-suite\brandingdata\bg\licensing\policy.def
                                                                                                                                                  • Size 718B
                                                                                                                                                  • SHA256 25cb063707d322d112c4f6d9b10dde10a8e381bcbf56f5e50ba853232c79d0dd
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  policy.def
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\avast-suite\brandingdata\tu\licensing\policy.def
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 2f12d0f88b2d4a0d70a546551141dd7506bc447b4abc0678b41390b2fe342fb8
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  icarus_product.dll
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\avast-suite\icarus_product.dll
                                                                                                                                                  • Size 7.9MB
                                                                                                                                                  • SHA256 49c2f38dd3aa6e6f837852114bdcc80bb68d0acdf4541050647ea8ec04366e5f
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  icarus_rvrt.exe
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\avast-suite\icarus_rvrt.exe
                                                                                                                                                  • Size 54KB
                                                                                                                                                  • SHA256 097709779bf6e7a3f93b65510c1df2a6d28c2c8052874b39d560addfccc44493
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  bug_report.exe
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\common\bug_report.exe
                                                                                                                                                  • Size 6.2MB
                                                                                                                                                  • SHA256 ae8d7c5cc558990d169119110cab6e22d9c8ee63316deefa2ee4396b3a0bbd97
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  dump_process.exe
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\common\dump_process.exe
                                                                                                                                                  • Size 3.9MB
                                                                                                                                                  • SHA256 0c4a891db19991cb4351e187c2d2b2163aa5ae2a6fa62da192d99bf189455d67
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  icarus.exe
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\common\icarus.exe
                                                                                                                                                  • Size 9.4MB
                                                                                                                                                  • SHA256 b4c91224c06fd252173e5ecf6ea1321af540b136eb996f82199ac496e7949655
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  icarus_mod.dll
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\common\icarus_mod.dll
                                                                                                                                                  • Size 16KB
                                                                                                                                                  • SHA256 452cf7f8e5f64bfae85aaf0f70150342b6e1d74f985e96313fc89fe945a85b8c
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  icarus_ui.exe
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\common\icarus_ui.exe
                                                                                                                                                  • Size 12.4MB
                                                                                                                                                  • SHA256 e3a4a3dae6db3ed8de3816673a94d73d05cab23a99aea6501956cf55df26a14d
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  product-def.xml
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\common\product-def.xml
                                                                                                                                                  • Size 2.6MB
                                                                                                                                                  • SHA256 9e89509eef82c39c86dd86786c07ee01128f506db2d7e556934702abc0bedfff
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  product-info.xml
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\common\product-info.xml
                                                                                                                                                  • Size 11KB
                                                                                                                                                  • SHA256 261a738776da25e5857b469422cd7e50228f91fb2497403a4c79a3d9c541b690
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  setupui.cont
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\common\setupui.cont
                                                                                                                                                  • Size 673KB
                                                                                                                                                  • SHA256 55cfb5d197bfb7e8674e1c3c13675bad0b5464733682017b93fc9dfef2a51144
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  epps.edat
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\epps.edat
                                                                                                                                                  • Size 80B
                                                                                                                                                  • SHA256 c6528b50bbe1265eeb1beb88535e7f6257075daaa245ed693e9ac38511b297bf
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  giet.edat
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\giet.edat
                                                                                                                                                  • Size 8B
                                                                                                                                                  • SHA256 c2cb92b00918d830aa68e4d5496ca412e3bc86f88444cb3de9d52e62a877b93f
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  icarus-info.xml
                                                                                                                                                  • Path C:\Windows\Temp\asw-489e8eb1-b80a-420c-a822-7f1b53ab50da\icarus-info.xml
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 8b85454d2e80a905fd280a496d21dfe7d63607300ea81e10e74524f654eb582b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  memory/4012-34-0x0000000005E70000-0x0000000005FB0000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-32-0x0000000005E70000-0x0000000005FB0000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-145-0x0000000007990000-0x0000000007AD0000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-5022-0x0000000000BA0000-0x0000000000FD7000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-87-0x0000000005E70000-0x0000000005FB0000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-66-0x0000000000BA0000-0x0000000000FD7000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-41-0x0000000005E70000-0x0000000005FB0000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-39-0x0000000005E70000-0x0000000005FB0000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-40-0x0000000005E70000-0x0000000005FB0000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-31-0x0000000005E70000-0x0000000005FB0000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-221-0x0000000000BA0000-0x0000000000FD7000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-210-0x0000000000BA0000-0x0000000000FD7000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-35-0x0000000000BA0000-0x0000000000FD7000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-26-0x0000000000BA0000-0x0000000000FD7000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-22-0x0000000005E70000-0x0000000005FB0000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-6-0x0000000001140000-0x0000000001141000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-24-0x0000000001140000-0x0000000001141000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4012-25-0x0000000005E70000-0x0000000005FB0000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4020-23-0x0000000000230000-0x000000000030C000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4020-0-0x0000000000230000-0x000000000030C000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/6016-4903-0x00007FF9CF0C0000-0x00007FF9CF0C1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/6016-4904-0x00007FF9CEB00000-0x00007FF9CEB01000-memory.dmp
                                                                                                                                                  Download