Overview

overview

8

Static

static

3

ByteBreake...41.exe

windows10-2004-x64

7

ByteBreake...41.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    96s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/10/2026, 19:54

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ByteBreaker V1_78517041.exe
  • Size 702KB
  • Sample261023-ymvnrazwft
  • SHA256 74b57e66864831c686f2a1bb445c7ba2a4bd5d985aa9879e67bb8a7c847e04f5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoveryexecutionpersistenceprivilege_escalationransomwarespywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 6 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

    defense_evasion
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Drops file in System32 directory 2 IoCs
  • Drops file in Program Files directory 24 IoCs
  • Drops file in Windows directory 1 IoCs
  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Using powershell.exe command.

    execution
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies trusted root certificate store through registry 1 TTPs 3 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

    defense_evasion
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 22 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 15 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 46 IoCs
  • Modifies registry class 56 IoCs
  • Modifies system certificate store 2 TTPs 11 IoCs
    defense_evasionspywaretrojan
  • Opens file in notepad (likely ransom note) 12 IoCs
    ransomware
  • Suspicious behavior: EnumeratesProcesses 11 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 36 IoCs
  • Suspicious use of SendNotifyMessage 19 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k netsvcs -p -s Schedule
    1⤵
      PID:1676
      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
        2⤵
        • Enumerates system info in registry
        PID:7104
        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff68e2ee598,0x7ff68e2ee5a8,0x7ff68e2ee5b8
          3⤵
            PID:8108
          • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
            3⤵
              PID:7340
        • C:\Users\Admin\AppData\Local\Temp\ByteBreaker V1_78517041.exe
          "C:\Users\Admin\AppData\Local\Temp\ByteBreaker V1_78517041.exe"
          1⤵
          • Downloads MZ/PE file
          • Drops file in Program Files directory
          • Reads the TCP/IP host and domain name from the registry
          • Modifies registry class
          • Suspicious use of WriteProcessMemory
          PID:2600
          • C:\Users\Admin\AppData\Local\OperaGX_78517041.exe
            C:\Users\Admin\AppData\Local\OperaGX_78517041.exe --silent --allusers=0
            2⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:1804
            • C:\Users\Admin\AppData\Local\Temp\7zSC07C9CA9\installer.exe
              C:\Users\Admin\AppData\Local\Temp\7zSC07C9CA9\installer.exe --silent --allusers=0 --server-tracking-blob=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
              3⤵
              • Downloads MZ/PE file
              • Executes dropped EXE
              • Enumerates connected drives
              • Reads the TCP/IP host and domain name from the registry
              • Modifies system certificate store
              • Suspicious use of WriteProcessMemory
              PID:3308
              • C:\Users\Admin\AppData\Local\Temp\7zSC07C9CA9\installer.exe
                C:\Users\Admin\AppData\Local\Temp\7zSC07C9CA9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x2a8,0x2ac,0x2b0,0x288,0x2b4,0x7ff7d7fe69d8,0x7ff7d7fe69e8,0x7ff7d7fe69f8
                4⤵
                • Executes dropped EXE
                PID:5404
              • C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\installer.exe" --version
                4⤵
                • Executes dropped EXE
                PID:4268
              • C:\Users\Admin\AppData\Local\Temp\7zSC07C9CA9\installer.exe
                "C:\Users\Admin\AppData\Local\Temp\7zSC07C9CA9\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=3308 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_20261023205513" --session-guid=7eae19ab-66f3-4ba7-bcb9-0b2df59e7aa4 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=0C08000000000000
                4⤵
                • Executes dropped EXE
                • Enumerates connected drives
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:4704
                • C:\Users\Admin\AppData\Local\Temp\7zSC07C9CA9\installer.exe
                  C:\Users\Admin\AppData\Local\Temp\7zSC07C9CA9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x2b4,0x2b8,0x2bc,0x288,0x2c0,0x7ff7d7fe69d8,0x7ff7d7fe69e8,0x7ff7d7fe69f8
                  5⤵
                  • Executes dropped EXE
                  PID:2244
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe" --backend --initial-pid=3308 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131" --session-guid=7eae19ab-66f3-4ba7-bcb9-0b2df59e7aa4 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=137.0.6036.65
                  5⤵
                  • Executes dropped EXE
                  • Enumerates connected drives
                  • Enumerates system info in registry
                  • Modifies registry class
                  • Suspicious use of WriteProcessMemory
                  PID:5956
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x2a8,0x2ac,0x2b0,0x284,0x2b4,0x7ff64aca69d8,0x7ff64aca69e8,0x7ff64aca69f8
                    6⤵
                    • Executes dropped EXE
                    PID:4284
                  • C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\assistant\assistant_installer.exe
                    "C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                    6⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Writes a Windows system DLL name to a user directory
                    • Adds Run key to start application
                    • System Location Discovery: System Language Discovery
                    • Modifies Internet Explorer settings
                    • Suspicious use of WriteProcessMemory
                    PID:3704
                    • C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\assistant\assistant_installer.exe
                      "C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x24c,0x250,0x254,0x22c,0x258,0x89b950,0x89b95c,0x89b968
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Location Discovery: System Language Discovery
                      PID:1080
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Location Discovery: System Language Discovery
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:1848
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x30b950,0x30b95c,0x30b968
                        8⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        PID:3732
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                        8⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Reads the TCP/IP host and domain name from the registry
                        • System Location Discovery: System Language Discovery
                        • Enumerates system info in registry
                        • Suspicious use of FindShellTrayWindow
                        • Suspicious use of SendNotifyMessage
                        • Suspicious use of WriteProcessMemory
                        PID:2788
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                          9⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • Suspicious use of WriteProcessMemory
                          PID:4332
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x164,0x168,0x16c,0x160,0x170,0x7ffd83d38ca8,0x7ffd83d38cb8,0x7ffd83d38cc8
                            10⤵
                            • Executes dropped EXE
                            PID:3916
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                          9⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • Enumerates system info in registry
                          • Suspicious use of WriteProcessMemory
                          PID:4092
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x160,0x164,0x168,0x15c,0x16c,0x7ffd83d38ca8,0x7ffd83d38cb8,0x7ffd83d38cc8
                            10⤵
                            • Executes dropped EXE
                            PID:1904
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x294,0x298,0x29c,0x260,0x2a0,0xd78348,0xd78354,0xd78360
                          9⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          • Suspicious use of WriteProcessMemory
                          PID:4524
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                            10⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • Enumerates system info in registry
                            • Suspicious use of WriteProcessMemory
                            PID:2896
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ffd83d38ca8,0x7ffd83d38cb8,0x7ffd83d38cc8
                              11⤵
                              • Executes dropped EXE
                              PID:5880
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                            10⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • Suspicious use of WriteProcessMemory
                            PID:3852
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ffd83d38ca8,0x7ffd83d38cb8,0x7ffd83d38cc8
                              11⤵
                              • Executes dropped EXE
                              PID:4968
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                            10⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • Enumerates system info in registry
                            • Suspicious use of WriteProcessMemory
                            PID:6504
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x154,0x164,0x7ffd83d38ca8,0x7ffd83d38cb8,0x7ffd83d38cc8
                              11⤵
                              • Executes dropped EXE
                              PID:6708
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                    6⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Adds Run key to start application
                    • Reads the TCP/IP host and domain name from the registry
                    • Checks processor information in registry
                    • Enumerates system info in registry
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                    • Suspicious use of FindShellTrayWindow
                    • Suspicious use of SendNotifyMessage
                    • Suspicious use of WriteProcessMemory
                    PID:6020
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x15c,0x160,0x164,0x158,0x168,0x7ffd83d38ca8,0x7ffd83d38cb8,0x7ffd83d38cc8
                      7⤵
                      • Executes dropped EXE
                      PID:1660
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1632,i,11717105554917489183,3170475000115998718,262144 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1876 /prefetch:2
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      PID:4816
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2020,i,14817532321908384019,12009537045064972866,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2220 /prefetch:11
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Reads the TCP/IP host and domain name from the registry
                      • System Time Discovery
                      PID:5724
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2468,i,13270605399275562650,17448950236809287053,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2484 /prefetch:13
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      PID:800
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2796,i,737430765657784502,12424340868986543502,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2716 /prefetch:14
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      PID:1308
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3044,i,2494835017225675133,8464062580648789506,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3128 /prefetch:14
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      PID:1688
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3056,i,15133525253505181102,10870364779945772726,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3148 /prefetch:14
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      PID:4336
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3068,i,4854926544416489632,15373060634364654434,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3276 /prefetch:14
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      PID:5112
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3160,i,10189768640281086977,14154000244381746122,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3408 /prefetch:14
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      PID:4688
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3192,i,10721114548682589729,5288248106237838609,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3428 /prefetch:14
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      PID:4268
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3272,i,10244806592721564980,574688657477616244,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3732 /prefetch:1
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      PID:5624
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_gx_splash.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                      7⤵
                      • Executes dropped EXE
                      PID:6780
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4764,i,3924450559904980475,18213290887832368687,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4776 /prefetch:1
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      PID:2380
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4932,i,12601675555370330014,9019900195419998651,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4948 /prefetch:9
                      7⤵
                      • Executes dropped EXE
                      PID:2580
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5104,i,8736243239642955109,6427318886710420259,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5124 /prefetch:1
                      7⤵
                      • Executes dropped EXE
                      • Enumerates system info in registry
                      PID:2016
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5304,i,1325186336911490151,13217827346450959836,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5344 /prefetch:1
                      7⤵
                      • Executes dropped EXE
                      • Enumerates system info in registry
                      PID:940
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5380,i,11713086725890029134,9966559041669443024,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5532 /prefetch:14
                      7⤵
                      • Executes dropped EXE
                      • Enumerates system info in registry
                      PID:1568
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5348,i,8258293197596480346,18000573265987311908,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5536 /prefetch:14
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      PID:6320
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5356,i,4387813229549131324,7320358484741273012,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5544 /prefetch:14
                      7⤵
                      • Executes dropped EXE
                      • Enumerates system info in registry
                      PID:6332
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5376,i,3714309622781887802,8653757762184465233,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5576 /prefetch:14
                      7⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      PID:6360
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6092,i,10240566002769425508,3492525670707423071,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6040 /prefetch:9
                      7⤵
                      • Executes dropped EXE
                      • Enumerates system info in registry
                      PID:7188
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6968,i,2651233651876913595,11946112479443109354,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6932 /prefetch:9
                      7⤵
                      • Executes dropped EXE
                      • Enumerates system info in registry
                      PID:7388
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6716,i,15871454636986473061,15309275674643170135,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6692 /prefetch:1
                      7⤵
                      • Executes dropped EXE
                      • Enumerates system info in registry
                      PID:7976
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6988,i,8918140398624125893,12287043977522331482,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6992 /prefetch:12
                      7⤵
                      • Executes dropped EXE
                      • Enumerates system info in registry
                      PID:8136
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7432,i,14586954784362069285,2532076903345985581,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7444 /prefetch:14
                      7⤵
                      • Executes dropped EXE
                      • Enumerates system info in registry
                      PID:8148
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7452,i,11387521705520224092,2323545283971927617,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7428 /prefetch:14
                      7⤵
                      • Executes dropped EXE
                      • Enumerates system info in registry
                      PID:8160
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7588,i,1316731399521675239,14750254243561448811,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7608 /prefetch:14
                      7⤵
                      • Executes dropped EXE
                      PID:8168
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7736,i,13906503001016401519,1499286097745062048,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7844 /prefetch:14
                      7⤵
                      • Executes dropped EXE
                      PID:8184
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7888,i,16072724024678979362,17001335626232729969,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7900 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:6388
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8024,i,7957313579499501709,10259235483889877459,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8028 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:6588
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8296,i,16995173737050522717,12123356532662257346,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8304 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:6364
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8340,i,5553451033982025009,8234258292295155593,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8348 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:6432
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8516,i,17338750904965784117,13410645157401070856,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8576 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:6428
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8620,i,15621018514840622006,15212323872790959242,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8640 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:6464
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8884,i,5896428563701093371,13065529703475971400,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8896 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:6160
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8904,i,11558764543557733037,7716107710929029608,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9044 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:6632
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=5640,i,17362604979727307037,5754476295044887976,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9228 /prefetch:9
                      7⤵
                      • Enumerates system info in registry
                      PID:7420
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9264,i,6726721970712772994,4164744453479890394,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9344 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:7448
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9552,i,15879726440976449837,16397019012388945443,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9580 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:7436
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9736,i,9075384908008603066,6024810588618394370,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9764 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:7468
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                      7⤵
                      • Reads the TCP/IP host and domain name from the registry
                      • Enumerates system info in registry
                      PID:7596
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff68e2ee598,0x7ff68e2ee5a8,0x7ff68e2ee5b8
                        8⤵
                          PID:7532
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10248,i,3121516588572474957,6733253738782299639,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=3284 /prefetch:14
                        7⤵
                        • Enumerates system info in registry
                        PID:2212
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10416,i,227456636184871315,2452608730061295580,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10428 /prefetch:14
                        7⤵
                        • Enumerates system info in registry
                        PID:7908
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=10420,i,16837144773943860007,2580973427185754119,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10520 /prefetch:1
                        7⤵
                        • Enumerates system info in registry
                        PID:6264
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10668,i,7121104669739235021,15330515623870103779,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10696 /prefetch:14
                        7⤵
                        • Enumerates system info in registry
                        PID:5824
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10928,i,7304451975231184776,1283120694057818008,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10944 /prefetch:14
                        7⤵
                          PID:6780
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=11084,i,5328204143954067413,2387429328667334534,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11096 /prefetch:14
                          7⤵
                          • Enumerates system info in registry
                          PID:4432
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=11096,i,5140871420039484713,16489021382837723020,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10644 /prefetch:14
                          7⤵
                            PID:2904
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3460,i,3411284396102603683,13784853937871577588,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11216 /prefetch:14
                            7⤵
                              PID:3276
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=4112,i,5758746687162691861,12548992176375876593,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=4100 /prefetch:14
                              7⤵
                                PID:1140
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5832,i,13520059477427953805,7446806088310783509,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=10712 /prefetch:14
                                7⤵
                                  PID:7564
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8052,i,9407997574079425260,11679202869719542268,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=8056 /prefetch:14
                                  7⤵
                                    PID:7108
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10736,i,12506456231958051203,219187098867883681,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=9724 /prefetch:14
                                    7⤵
                                      PID:3164
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7576,i,7331526923214046750,7316045046234875584,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=3656 /prefetch:14
                                      7⤵
                                        PID:252
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3852,i,4571709136288043734,5801800076958046621,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=3296 /prefetch:14
                                        7⤵
                                          PID:6556
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3660,i,16126028214868668392,6272912462364067143,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=3628 /prefetch:14
                                          7⤵
                                            PID:7484
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9208,i,10713473168890130778,10999947520773527655,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=4484 /prefetch:14
                                            7⤵
                                              PID:1448
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9588,i,7699432213981712873,3242124097969608372,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=6696 /prefetch:14
                                              7⤵
                                                PID:6904
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9236,i,7143300669487692544,5615416071786038412,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=9472 /prefetch:14
                                                7⤵
                                                  PID:7600
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9736,i,14159700888869117688,1606516481068054993,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=3556 /prefetch:14
                                                  7⤵
                                                    PID:6788
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=7564,i,3304311149431513802,11182955617144532255,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=7700 /prefetch:9
                                                    7⤵
                                                      PID:3796
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8968,i,15668991702831709503,14734978776240571999,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8944 /prefetch:14
                                                      7⤵
                                                        PID:7448
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8920,i,2652621951127694525,13546305422761715952,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=8976 /prefetch:14
                                                        7⤵
                                                          PID:8168
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7720,i,473099946005874741,11386981811335969776,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=8816 /prefetch:14
                                                          7⤵
                                                            PID:5232
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8552,i,15762049790279992903,4805122673785357757,524288 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=7544 /prefetch:14
                                                            7⤵
                                                              PID:3936
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=10248,i,998684204617508767,11281692173553586149,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=10276 /prefetch:9
                                                              7⤵
                                                                PID:6632
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=8116,i,7912309406050779079,5960091257546325476,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=8372 /prefetch:9
                                                                7⤵
                                                                  PID:7752
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=8088,i,6875413235137680712,5555239073948828494,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=8112 /prefetch:9
                                                                  7⤵
                                                                    PID:3184
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=6696,i,11751798161428444695,3553382508307434705,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=7948 /prefetch:9
                                                                    7⤵
                                                                      PID:8652
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=3636,i,4267464979261133285,6976535351304301199,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=8836 /prefetch:9
                                                                      7⤵
                                                                        PID:8672
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 OPR/137.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=2292,i,16477990980391336205,3264351406431734819,1572864 --field-trial-handle=1880,i,12868450547685893589,14750853360344224971,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureVideoHeuristics,BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,13059568839892517900,1315319817577268057,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=816 /prefetch:9
                                                                        7⤵
                                                                          PID:9180
                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\assistant\Opera_GX_assistant_137.0.6036.65_Setup.exe_sfx.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\assistant\Opera_GX_assistant_137.0.6036.65_Setup.exe_sfx.exe"
                                                                    4⤵
                                                                    • Executes dropped EXE
                                                                    • Writes a Windows system DLL name to a user directory
                                                                    • System Location Discovery: System Language Discovery
                                                                    PID:4556
                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\assistant\assistant_installer.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\assistant\assistant_installer.exe" --version
                                                                    4⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Suspicious use of WriteProcessMemory
                                                                    PID:904
                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\assistant\assistant_installer.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x89b950,0x89b95c,0x89b968
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • System Location Discovery: System Language Discovery
                                                                      PID:5340
                                                              • C:\Program Files\Booster\GameBooster.exe
                                                                "C:\Program Files\Booster\GameBooster.exe" install
                                                                2⤵
                                                                • Executes dropped EXE
                                                                • Drops file in Program Files directory
                                                                • Suspicious use of WriteProcessMemory
                                                                PID:4812
                                                                • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                  powershell.exe -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\GameBooster_CreateStartupTask.ps1"
                                                                  3⤵
                                                                  • Command and Scripting Interpreter: PowerShell
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                  PID:1524
                                                              • C:\Users\Admin\AppData\Local\AIChat_78517041.exe
                                                                C:\Users\Admin\AppData\Local\AIChat_78517041.exe /S
                                                                2⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Reads the TCP/IP host and domain name from the registry
                                                                • System Location Discovery: System Language Discovery
                                                                • Suspicious behavior: EnumeratesProcesses
                                                                PID:2804
                                                                • C:\Users\Admin\AppData\Local\aichat\aichat.exe
                                                                  "C:\Users\Admin\AppData\Local\aichat\aichat.exe" --hidden
                                                                  3⤵
                                                                  • Executes dropped EXE
                                                                  • Adds Run key to start application
                                                                  • Checks whether UAC is enabled
                                                                  • Reads the TCP/IP host and domain name from the registry
                                                                  • Modifies system certificate store
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  • Suspicious use of FindShellTrayWindow
                                                                  • Suspicious use of WriteProcessMemory
                                                                  PID:2760
                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=2760.5616.4919829334057530676 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                    4⤵
                                                                    • Enumerates system info in registry
                                                                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                    • Suspicious use of WriteProcessMemory
                                                                    PID:2576
                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView /prefetch:4 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffdab2d5fd8,0x7ffdab2d5fe4,0x7ffdab2d5ff0
                                                                      5⤵
                                                                        PID:3668
                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1740 --field-trial-handle=1744,i,5267728026012176932,2479407202501383527,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                        5⤵
                                                                          PID:3052
                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2148 --field-trial-handle=1744,i,5267728026012176932,2479407202501383527,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                          5⤵
                                                                            PID:3904
                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2404 --field-trial-handle=1744,i,5267728026012176932,2479407202501383527,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                            5⤵
                                                                              PID:5980
                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3452 --field-trial-handle=1744,i,5267728026012176932,2479407202501383527,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6 /prefetch:1
                                                                              5⤵
                                                                                PID:4856
                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView" --webview-exe-name=aichat.exe --webview-exe-version=2.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4636 --field-trial-handle=1744,i,5267728026012176932,2479407202501383527,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d1118be78b457af6e082c6802c448b2df9ba5cc6
                                                                                5⤵
                                                                                  PID:6404
                                                                          • C:\Windows\system32\NOTEPAD.EXE
                                                                            "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                                                            2⤵
                                                                            • Opens file in notepad (likely ransom note)
                                                                            PID:2748
                                                                          • C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe
                                                                            "C:\Users\Admin\AppData\Local\Temp\PremierOpinion\ContentI3.exe" -c:1538 -t:InstallUnion
                                                                            2⤵
                                                                            • Executes dropped EXE
                                                                            • Drops file in Program Files directory
                                                                            • Reads the TCP/IP host and domain name from the registry
                                                                            • System Location Discovery: System Language Discovery
                                                                            PID:3320
                                                                            • C:\Program Files (x86)\PremierOpinion\pmropn.exe
                                                                              C:\Program Files (x86)\PremierOpinion\pmropn.exe -install -uninst:PremierOpinion -t:InstallUnion -bid:yRpzvxoyQeWoHkS4V2POPN -o:0
                                                                              3⤵
                                                                              • Drops file in System32 directory
                                                                              • Modifies trusted root certificate store through registry
                                                                              • Reads the TCP/IP host and domain name from the registry
                                                                              • System Location Discovery: System Language Discovery
                                                                              • Modifies system certificate store
                                                                              PID:7428
                                                                          • C:\Windows\system32\NOTEPAD.EXE
                                                                            "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                                                            2⤵
                                                                            • Opens file in notepad (likely ransom note)
                                                                            PID:6164
                                                                          • C:\Windows\system32\NOTEPAD.EXE
                                                                            "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                                                            2⤵
                                                                            • Opens file in notepad (likely ransom note)
                                                                            PID:3000
                                                                          • C:\Windows\system32\NOTEPAD.EXE
                                                                            "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                                                            2⤵
                                                                            • Opens file in notepad (likely ransom note)
                                                                            PID:6900
                                                                          • C:\Windows\system32\NOTEPAD.EXE
                                                                            "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                                                            2⤵
                                                                            • Opens file in notepad (likely ransom note)
                                                                            PID:7672
                                                                          • C:\Windows\system32\NOTEPAD.EXE
                                                                            "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                                                            2⤵
                                                                            • Opens file in notepad (likely ransom note)
                                                                            PID:8396
                                                                          • C:\Windows\system32\NOTEPAD.EXE
                                                                            "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                                                            2⤵
                                                                            • Opens file in notepad (likely ransom note)
                                                                            PID:7408
                                                                          • C:\Windows\system32\NOTEPAD.EXE
                                                                            "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                                                            2⤵
                                                                            • Opens file in notepad (likely ransom note)
                                                                            PID:6508
                                                                          • C:\Windows\system32\NOTEPAD.EXE
                                                                            "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                                                            2⤵
                                                                            • Opens file in notepad (likely ransom note)
                                                                            PID:8560
                                                                          • C:\Windows\system32\NOTEPAD.EXE
                                                                            "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                                                            2⤵
                                                                            • Opens file in notepad (likely ransom note)
                                                                            PID:9104
                                                                          • C:\Windows\system32\NOTEPAD.EXE
                                                                            "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                                                            2⤵
                                                                            • Opens file in notepad (likely ransom note)
                                                                            PID:4120
                                                                          • C:\Windows\system32\NOTEPAD.EXE
                                                                            "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                                                            2⤵
                                                                            • Opens file in notepad (likely ransom note)
                                                                            PID:7388
                                                                        • C:\Program Files\Booster\GameBooster.exe
                                                                          "C:\Program Files\Booster\GameBooster.exe"
                                                                          1⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • Reads the TCP/IP host and domain name from the registry
                                                                          • Modifies data under HKEY_USERS
                                                                          • Suspicious use of WriteProcessMemory
                                                                          PID:2472
                                                                          • C:\Program Files\Booster\GameBooster.exe
                                                                            "C:\Program Files\Booster\GameBooster.exe" --minimized
                                                                            2⤵
                                                                            • Executes dropped EXE
                                                                            • Suspicious use of FindShellTrayWindow
                                                                            • Suspicious use of SendNotifyMessage
                                                                            PID:5476
                                                                        • C:\Windows\system32\svchost.exe
                                                                          C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                          1⤵
                                                                            PID:4860
                                                                          • C:\Windows\system32\wbem\unsecapp.exe
                                                                            C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                            1⤵
                                                                              PID:6952
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                                              1⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              • Enumerates system info in registry
                                                                              • Suspicious use of WriteProcessMemory
                                                                              PID:6988
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=137.0.6036.65 --initial-client-data=0x158,0x15c,0x160,0x104,0x164,0x7ffd83d38ca8,0x7ffd83d38cb8,0x7ffd83d38cc8
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                PID:7012
                                                                            • C:\Program Files (x86)\PremierOpinion\pmservice.exe
                                                                              "C:\Program Files (x86)\PremierOpinion\pmservice.exe" /service
                                                                              1⤵
                                                                              • Drops file in Program Files directory
                                                                              • Modifies trusted root certificate store through registry
                                                                              • System Location Discovery: System Language Discovery
                                                                              • Modifies data under HKEY_USERS
                                                                              • Modifies system certificate store
                                                                              PID:6324
                                                                              • C:\Windows\system32\rundll32.exe
                                                                                C:\Windows\system32\rundll32.exe C:\Windows\system32\pmls64.dll,UpdateProcess 1676
                                                                                2⤵
                                                                                  PID:7572
                                                                                • C:\Windows\SysWOW64\reg.exe
                                                                                  reg.exe EXPORT "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{eeb86aef-4a5d-4b75-9d74-f16d438fc286}" C:\PROGRA~2\PREMIE~1\RData.reg /y
                                                                                  2⤵
                                                                                  • Drops file in Program Files directory
                                                                                  • Drops file in Windows directory
                                                                                  • System Location Discovery: System Language Discovery
                                                                                  PID:5040
                                                                                • \??\c:\program files (x86)\premieropinion\pmropn.exe
                                                                                  "c:\program files (x86)\premieropinion\pmropn.exe" -boot
                                                                                  2⤵
                                                                                    PID:7960
                                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                      CheckNetIsolation.exe LoopbackExempt -s
                                                                                      3⤵
                                                                                        PID:8708
                                                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                        CheckNetIsolation.exe LoopbackExempt -s
                                                                                        3⤵
                                                                                          PID:9204
                                                                                      • C:\Windows\SysWOW64\cmd.exe
                                                                                        /C C:\PROGRA~2\PREMIE~1\pmropn32.exe 7960
                                                                                        2⤵
                                                                                          PID:8492
                                                                                          • C:\PROGRA~2\PREMIE~1\pmropn32.exe
                                                                                            C:\PROGRA~2\PREMIE~1\pmropn32.exe 7960
                                                                                            3⤵
                                                                                              PID:8452
                                                                                          • C:\Windows\SysWOW64\cmd.exe
                                                                                            /C C:\PROGRA~2\PREMIE~1\pmropn64.exe 7960
                                                                                            2⤵
                                                                                              PID:8516
                                                                                              • C:\PROGRA~2\PREMIE~1\pmropn64.exe
                                                                                                C:\PROGRA~2\PREMIE~1\pmropn64.exe 7960
                                                                                                3⤵
                                                                                                  PID:8636
                                                                                              • \??\c:\program files (x86)\premieropinion\pmropn.exe
                                                                                                "c:\program files (x86)\premieropinion\pmropn.exe" -updateapps
                                                                                                2⤵
                                                                                                  PID:8848
                                                                                                  • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.aad.brokerplugin_cw5n1h2txyewy
                                                                                                    3⤵
                                                                                                      PID:8768
                                                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.ecapp_8wekyb3d8bbwe
                                                                                                      3⤵
                                                                                                        PID:8596
                                                                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.microsoftedge.stable_8wekyb3d8bbwe
                                                                                                        3⤵
                                                                                                          PID:8688
                                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.sechealthui_8wekyb3d8bbwe
                                                                                                          3⤵
                                                                                                            PID:8788
                                                                                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                            CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.ui.xaml.2.8_8wekyb3d8bbwe
                                                                                                            3⤵
                                                                                                              PID:8800
                                                                                                            • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                              CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.vclibs.140.00_8wekyb3d8bbwe
                                                                                                              3⤵
                                                                                                                PID:8916
                                                                                                              • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.win32webviewhost_cw5n1h2txyewy
                                                                                                                3⤵
                                                                                                                  PID:8936
                                                                                                                • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                  CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.narratorquickstart_8wekyb3d8bbwe
                                                                                                                  3⤵
                                                                                                                    PID:9028
                                                                                                                  • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                    CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.shellexperiencehost_cw5n1h2txyewy
                                                                                                                    3⤵
                                                                                                                      PID:6468
                                                                                                                    • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                      CheckNetIsolation.exe LoopbackExempt -a -n=microsoft.windows.startmenuexperiencehost_cw5n1h2txyewy
                                                                                                                      3⤵
                                                                                                                        PID:9148
                                                                                                                      • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                        CheckNetIsolation.exe LoopbackExempt -a -n=microsoftwindows.client.cbs_cw5n1h2txyewy
                                                                                                                        3⤵
                                                                                                                          PID:9168
                                                                                                                        • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                          CheckNetIsolation.exe LoopbackExempt -a -n=windows.immersivecontrolpanel_cw5n1h2txyewy
                                                                                                                          3⤵
                                                                                                                            PID:8380
                                                                                                                          • C:\Windows\SysWOW64\CheckNetIsolation.exe
                                                                                                                            CheckNetIsolation.exe LoopbackExempt -a -n=windows_ie_ac_001
                                                                                                                            3⤵
                                                                                                                              PID:5136
                                                                                                                        • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                          C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                          1⤵
                                                                                                                            PID:7448

                                                                                                                          Network

                                                                                                                                MITRE ATT&CK Enterprise v16

                                                                                                                                Reconnaissance

                                                                                                                                Resource Development

                                                                                                                                Initial Access

                                                                                                                                Execution

                                                                                                                                Command and Scripting Interpreter

                                                                                                                                1
                                                                                                                                T1059

                                                                                                                                PowerShell

                                                                                                                                1
                                                                                                                                T1059.001

                                                                                                                                Persistence

                                                                                                                                Boot or Logon Autostart Execution

                                                                                                                                1
                                                                                                                                T1547

                                                                                                                                Registry Run Keys / Startup Folder

                                                                                                                                1
                                                                                                                                T1547.001

                                                                                                                                Event Triggered Execution

                                                                                                                                1
                                                                                                                                T1546

                                                                                                                                Component Object Model Hijacking

                                                                                                                                1
                                                                                                                                T1546.015

                                                                                                                                Hijack Execution Flow

                                                                                                                                1
                                                                                                                                T1574

                                                                                                                                DLL Search Order Hijacking

                                                                                                                                1
                                                                                                                                T1574.001

                                                                                                                                Privilege Escalation

                                                                                                                                Boot or Logon Autostart Execution

                                                                                                                                1
                                                                                                                                T1547

                                                                                                                                Registry Run Keys / Startup Folder

                                                                                                                                1
                                                                                                                                T1547.001

                                                                                                                                Event Triggered Execution

                                                                                                                                1
                                                                                                                                T1546

                                                                                                                                Component Object Model Hijacking

                                                                                                                                1
                                                                                                                                T1546.015

                                                                                                                                Hijack Execution Flow

                                                                                                                                1
                                                                                                                                T1574

                                                                                                                                DLL Search Order Hijacking

                                                                                                                                1
                                                                                                                                T1574.001

                                                                                                                                Defense Evasion

                                                                                                                                Hijack Execution Flow

                                                                                                                                1
                                                                                                                                T1574

                                                                                                                                DLL Search Order Hijacking

                                                                                                                                1
                                                                                                                                T1574.001

                                                                                                                                Masquerading

                                                                                                                                1
                                                                                                                                T1036

                                                                                                                                Match Legitimate Name or Location

                                                                                                                                1
                                                                                                                                T1036.005

                                                                                                                                Modify Registry

                                                                                                                                3
                                                                                                                                T1112

                                                                                                                                Subvert Trust Controls

                                                                                                                                2
                                                                                                                                T1553

                                                                                                                                Install Root Certificate

                                                                                                                                2
                                                                                                                                T1553.004

                                                                                                                                Credential Access

                                                                                                                                Credentials from Password Stores

                                                                                                                                1
                                                                                                                                T1555

                                                                                                                                Credentials from Web Browsers

                                                                                                                                1
                                                                                                                                T1555.003

                                                                                                                                Unsecured Credentials

                                                                                                                                1
                                                                                                                                T1552

                                                                                                                                Credentials In Files

                                                                                                                                1
                                                                                                                                T1552.001

                                                                                                                                Discovery

                                                                                                                                Network Share Discovery

                                                                                                                                1
                                                                                                                                T1135

                                                                                                                                Peripheral Device Discovery

                                                                                                                                1
                                                                                                                                T1120

                                                                                                                                Query Registry

                                                                                                                                5
                                                                                                                                T1012

                                                                                                                                System Information Discovery

                                                                                                                                5
                                                                                                                                T1082

                                                                                                                                System Location Discovery

                                                                                                                                1
                                                                                                                                T1614

                                                                                                                                System Language Discovery

                                                                                                                                1
                                                                                                                                T1614.001

                                                                                                                                System Network Configuration Discovery

                                                                                                                                1
                                                                                                                                T1016

                                                                                                                                System Time Discovery

                                                                                                                                1
                                                                                                                                T1124

                                                                                                                                Lateral Movement

                                                                                                                                Collection

                                                                                                                                Data from Local System

                                                                                                                                1
                                                                                                                                T1005

                                                                                                                                Command and Control

                                                                                                                                Exfiltration

                                                                                                                                Impact

                                                                                                                                Replay Monitor

                                                                                                                                Loading Replay Monitor...

                                                                                                                                Downloads

                                                                                                                                snt.dat.bac
                                                                                                                                • Path C:\PROGRA~2\PREMIE~1\snt.dat.bac
                                                                                                                                • Size 3.4MB
                                                                                                                                • SHA256 6abc176b00fa8f13da1323fd407e1e9335c08ff40e149910f62939663871eafa
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                snt.dat.bac
                                                                                                                                • Path C:\PROGRA~2\PREMIE~1\snt.dat.bac
                                                                                                                                • Size 3.4MB
                                                                                                                                • SHA256 0bad3c6d1d72359b8d6a52cfd2012b8624d7918b464df5908139dddaff1062ad
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                cacert.pem
                                                                                                                                • Path C:\Program Files (x86)\PremierOpinion\cacert.pem
                                                                                                                                • Size 3KB
                                                                                                                                • SHA256 9f19e7a7139cca8373b516ab1ae49c644aa1c8048e8c7aa5784774a081dcbb87
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                pmoci.bin
                                                                                                                                • Path C:\Program Files (x86)\PremierOpinion\pmoci.bin
                                                                                                                                • Size 4KB
                                                                                                                                • SHA256 20b0f94844860501e115fccd5c1462b2e2c932041d7989dc51c6d885b3429d8a
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                103621DE9CD5414CC2538780B4B75751
                                                                                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751
                                                                                                                                • Size 808B
                                                                                                                                • SHA256 3dd5ea8a14eb665ba6057d424f94e5e83757ffaab456578dbf038af04053b19e
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                56E83C5857C173AD065FC47EB887B239
                                                                                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\56E83C5857C173AD065FC47EB887B239
                                                                                                                                • Size 188KB
                                                                                                                                • SHA256 3d3f8937c81e7ef46da2f721ae39003a445f0cb26804df409d7dfaef89fade35
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                A9FA314C8877B1FA1F912B4C18662AEE
                                                                                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A9FA314C8877B1FA1F912B4C18662AEE
                                                                                                                                • Size 279B
                                                                                                                                • SHA256 a19f267e6071afb5b76bc0bdfe9d631251d55f096b5bb32e04933c81b8eb95f4
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                • Size 471B
                                                                                                                                • SHA256 fa0e95b9601e1707461c2768b5541fc25492a4b3d95596bc1cceb41627382a0b
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                103621DE9CD5414CC2538780B4B75751
                                                                                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751
                                                                                                                                • Size 192B
                                                                                                                                • SHA256 b9149b039e01fe49287c30da4ded25b09f20cff58e8d8982143ebed683e19899
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                56E83C5857C173AD065FC47EB887B239
                                                                                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\56E83C5857C173AD065FC47EB887B239
                                                                                                                                • Size 246B
                                                                                                                                • SHA256 4a49f893e37056618441acf74b157be5bedad5572edc6eabc737fb411aed3139
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                A9FA314C8877B1FA1F912B4C18662AEE
                                                                                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A9FA314C8877B1FA1F912B4C18662AEE
                                                                                                                                • Size 484B
                                                                                                                                • SHA256 b584d0bb41f216d7a828b54a33f4266adf1b94d5a6b5f50dd8c8336b589505b4
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                • Size 416B
                                                                                                                                • SHA256 174485a8077bf5d465afb45c3ea7116fa0544320ee6dd498d53efd578df2ca5c
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                AIChat_78517041.exe
                                                                                                                                • Path C:\Users\Admin\AppData\Local\AIChat_78517041.exe
                                                                                                                                • Size 3.6MB
                                                                                                                                • SHA256 6430a772eb047467aa0c3e4bc964719dbf85b9adc58e63738a8652099ba6f8ec
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                GameBooster[1].exe
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\H6HGNC2Z\GameBooster[1].exe
                                                                                                                                • Size 715KB
                                                                                                                                • SHA256 3bf07d3bfa2cb446e0bcbe889647a0734ab0255edf6b7290ac4c3e9d2e667fef
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                hgsdk[1].dll
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\H6HGNC2Z\hgsdk[1].dll
                                                                                                                                • Size 7.4MB
                                                                                                                                • SHA256 2720d215168108700767f8e9b57819d55ca139d69d8d828186da186850a37c6c
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                ContentI3[1].exe
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WLCSD876\ContentI3[1].exe
                                                                                                                                • Size 3.8MB
                                                                                                                                • SHA256 ef2734657b11113a433abb7ebac962e2bf6bf685f05c5f672997f01875430168
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                log-conversion[1].json
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WLCSD876\log-conversion[1].json
                                                                                                                                • Size 16B
                                                                                                                                • SHA256 6489d6d7a33c5d40e18fc61eeb6c34c341279ee61816394dde5189aa4ad8fae5
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                f_000005
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\Cache_Data\f_000005
                                                                                                                                • Size 77KB
                                                                                                                                • SHA256 56ced9c310659237d6b5cc37f6acdaa3deadf2b3adeaefef8dd6b285d9e9ccb3
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                f_00001e
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\Cache_Data\f_00001e
                                                                                                                                • Size 45KB
                                                                                                                                • SHA256 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                snapshot-new.baf
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
                                                                                                                                • Size 20B
                                                                                                                                • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                f_000001
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\f_000001
                                                                                                                                • Size 215KB
                                                                                                                                • SHA256 e2a6d1eba056f25ab2ab23da3a1c7ab80ab6a508725f9ee2d8c9eb7c1f7f3d93
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                OperaGX_78517041.exe
                                                                                                                                • Path C:\Users\Admin\AppData\Local\OperaGX_78517041.exe
                                                                                                                                • Size 4.0MB
                                                                                                                                • SHA256 7121be324a34e60b8d68c584407cf6c0b65b12f5dce98d588c34c2bc36d692b8
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                137.0.6036.65.manifest
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\137.0.6036.65.manifest
                                                                                                                                • Size 225B
                                                                                                                                • SHA256 4fc3f11f18f24cddf8ba040c914a1cace41e81eee15f34d4143a4be785bbb28a
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                150x150Logo.scale-100.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-100.png
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                150x150Logo.scale-100_contrast-white.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                150x150Logo.scale-140.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-140.png
                                                                                                                                • Size 3KB
                                                                                                                                • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                150x150Logo.scale-140_contrast-white.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                150x150Logo.scale-180.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-180.png
                                                                                                                                • Size 3KB
                                                                                                                                • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                150x150Logo.scale-180_contrast-white.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                                                                • Size 3KB
                                                                                                                                • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                150x150Logo.scale-80.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\Assets\150x150Logo.scale-80.png
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                installer.exe
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\137.0.6036.65\installer.exe
                                                                                                                                • Size 9.2MB
                                                                                                                                • SHA256 f79b9723e62a3cb69b94cbd762edc2eb94ddefa1d79823d760a0c5fd0299ccd7
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                installer_prefs.jsonc3d5e3f7-8223-41b6-8258-6ed1aa5b0634.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.jsonc3d5e3f7-8223-41b6-8258-6ed1aa5b0634.tmp
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 034a00385802ce44a1b5157abf85ecea9e474921a6ffe5d027773141f6dd03cb
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                Opera GX Browser.lnk
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\Opera GX Browser.lnk
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 ef2086d4de735caad1754a592cea22648924cc4dbf993acb214377692064c0ec
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                additional_file1.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\additional_file1.tmp
                                                                                                                                • Size 3.2MB
                                                                                                                                • SHA256 cd8129a92e34618206b386216a307a768ba8770cb76b4c16a08b35ac23c1228d
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                assistant_installer.exe
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\assistant\assistant_installer.exe
                                                                                                                                • Size 2.5MB
                                                                                                                                • SHA256 d1bebcbda51c7869eebf33275e4b6c3d2b3d37df6fae74a0561cdf2dffb5b293
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                dbgcore.dll
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\assistant\dbgcore.dll
                                                                                                                                • Size 238KB
                                                                                                                                • SHA256 65a487c32b2b0fdb5a022a7ed54dcf6b6f8271985d50c45c432fc8acb1bdf115
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                dbghelp.dll
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\assistant\dbghelp.dll
                                                                                                                                • Size 589KB
                                                                                                                                • SHA256 2ec4dcc1209a7f59c9215c5d8f17d7b35a91b2faf84d63ca5666cb6b02e46050
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                installer_prefs_include.json
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\installer_prefs_include.json
                                                                                                                                • Size 342B
                                                                                                                                • SHA256 b51affea54341e7c1ae61d713cb57c39058cdbaa542b7de2f0a21b14e750fbc0
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                installer_prefs_include.json1978bf9f-4da7-46a3-a6b4-5d7bd257c232.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\installer_prefs_include.json1978bf9f-4da7-46a3-a6b4-5d7bd257c232.tmp
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 5f26e82edc127fd490c55059f894c5638b383e58a8d9eca6bfcf4c08a9aeac83
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                installer_prefs_include.json6eedea63-97f6-4480-a57d-c3d1cacdb4e8.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\installer_prefs_include.json6eedea63-97f6-4480-a57d-c3d1cacdb4e8.tmp
                                                                                                                                • Size 357B
                                                                                                                                • SHA256 32b869d83ab7e03a70987bbe962cbbfb0b2b3b1ddc2948d6e71c17d42221bd2a
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                custom_partner_content.json
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\604fc3fd-1a53-4456-bf8b-dc5e5850336c Opera GX Installer Temp\opera_package_202610232055131\resources\custom_partner_content.json
                                                                                                                                • Size 245KB
                                                                                                                                • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                15b3c49a-4c9d-4929-a5e0-4cd262c87137.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\15b3c49a-4c9d-4929-a5e0-4cd262c87137.tmp
                                                                                                                                • Size 14KB
                                                                                                                                • SHA256 99dfb50b062db90ac585e2a877192973b88522ceb257a78345f1f1ca5da98e1b
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                33b3a698-610d-43f1-af06-f0c0170a9387.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\33b3a698-610d-43f1-af06-f0c0170a9387.tmp
                                                                                                                                • Size 46KB
                                                                                                                                • SHA256 176a736c95c08746480a0e25f7acf323d502d0f6aac4b4dfbeb2713513af8a52
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                66ff2f27-901e-445f-8ded-400fe2ef1564.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\66ff2f27-901e-445f-8ded-400fe2ef1564.tmp
                                                                                                                                • Size 472KB
                                                                                                                                • SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                installer.exe
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\7zSC07C9CA9\installer.exe
                                                                                                                                • Size 9.2MB
                                                                                                                                • SHA256 407955bd8dc43601214a22c6696f6db8da9352eb0c13b38fbeb780a90755fc52
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                824dad75-11ae-4157-93d6-d4b57eeb927c.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\824dad75-11ae-4157-93d6-d4b57eeb927c.tmp
                                                                                                                                • Size 3.0MB
                                                                                                                                • SHA256 5c8953fdd4f8a848a8711f749b4bf85376836da9a065b7bdd887e5d03f44cfd8
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                8f134733-e071-4132-800b-72276dce1bd6.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\8f134733-e071-4132-800b-72276dce1bd6.tmp
                                                                                                                                • Size 1.4MB
                                                                                                                                • SHA256 a75f68026cc1314a842f2b95800dd32a2c8792824be753ef40720af6beab58c2
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                GameBooster_CreateStartupTask.ps1
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\GameBooster_CreateStartupTask.ps1
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 e44dce271422bf943413d99eef29114e49d91571422d58e5710d8df5616669ef
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                GameBooster_log.txt
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\GameBooster_log.txt
                                                                                                                                • Size 126B
                                                                                                                                • SHA256 9129d88573d3f0c4e9b2490de0fb58aa5a4b6dec6d646c74525abf221e119d66
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                __PSScriptPolicyTest_qh0vvni2.ubb.psm1
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_qh0vvni2.ubb.psm1
                                                                                                                                • Size 60B
                                                                                                                                • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                aichat-startup.log
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\aichat-startup.log
                                                                                                                                • Size 411B
                                                                                                                                • SHA256 e13a9ea2472b51b3cc04627785e7ecff7ae73c830d364bab46a55a02be266a6d
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                c7c9ce0d-d044-4c64-ae17-12839f76d831.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\c7c9ce0d-d044-4c64-ae17-12839f76d831.tmp
                                                                                                                                • Size 3.5MB
                                                                                                                                • SHA256 9d645b0ce032688d4f3100cd1f1d178d3c2c9d04bb691144659b98b4931d8eef
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                System.dll
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\nss6092.tmp\System.dll
                                                                                                                                • Size 12KB
                                                                                                                                • SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                nsis_tauri_utils.dll
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\nss6092.tmp\nsis_tauri_utils.dll
                                                                                                                                • Size 33KB
                                                                                                                                • SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                messages.json
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6020_1531292581\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                • Size 396B
                                                                                                                                • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                Icon_Light_Neutral.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6020_1531292581\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                Icon_Light_Neutral.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6020_1531292581\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                                                                                                                • Size 962B
                                                                                                                                • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                sidebar-icon-57.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6020_1598953551\CRX_INSTALL\icons\sidebar-icon-57.png
                                                                                                                                • Size 914B
                                                                                                                                • SHA256 47814ebe57fa54280f03a94a13f582ff7b781fd7362c797117cc2e6ae388a160
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                messages.json
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6020_1708520634\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 13f83e7ad61d853293597de9e7583e7724680b7c80c31d0834097f2a7022741a
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                favicon_opera_one.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6020_313315945\CRX_INSTALL\favicon_opera_one.png
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                logo_128.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6020_740119106\CRX_INSTALL\public\icons\logo_128.png
                                                                                                                                • Size 7KB
                                                                                                                                • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                logo_16.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6020_740119106\CRX_INSTALL\public\icons\logo_16.png
                                                                                                                                • Size 653B
                                                                                                                                • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                logo_32.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6020_740119106\CRX_INSTALL\public\icons\logo_32.png
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                logo_48.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6020_740119106\CRX_INSTALL\public\icons\logo_48.png
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                logo_64.png
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6020_740119106\CRX_INSTALL\public\icons\logo_64.png
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                pmls.dll
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\~osE07F.tmp\pmls.dll
                                                                                                                                • Size 884KB
                                                                                                                                • SHA256 e471da417462c9f60181c27efe2355db4f0b3b4df6bd0d4097864a72677d8e5d
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                pmls64.dll
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\~osE07F.tmp\pmls64.dll
                                                                                                                                • Size 1.1MB
                                                                                                                                • SHA256 877c2894f42bf078dfa36f06b543490d800a32c4f5245464bfec300b56867661
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                pmph.dll
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\~osE07F.tmp\pmph.dll
                                                                                                                                • Size 806KB
                                                                                                                                • SHA256 7cdd0b4b6492483d07ddd1869ea4c213d8d5043aec14117b1a5926093bedc7e1
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                pmropn.exe
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\~osE07F.tmp\pmropn.exe
                                                                                                                                • Size 7.4MB
                                                                                                                                • SHA256 b8e134c1518903be8b260f821d1896b521f7f70956090562b3cc71b71bf8cb1b
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                pmropn32.exe
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\~osE07F.tmp\pmropn32.exe
                                                                                                                                • Size 244KB
                                                                                                                                • SHA256 b56a74fbe9b0a0c027f230a412dd69afbb697c41f31635352b37fe74d334fc15
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                pmropn64.exe
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\~osE07F.tmp\pmropn64.exe
                                                                                                                                • Size 303KB
                                                                                                                                • SHA256 f6de7618e24c0731e5ff77aa56f200d3c0e30e672a63c7d11b9717ece29e6814
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                pmservice.exe
                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\~osE07F.tmp\pmservice.exe
                                                                                                                                • Size 4.6MB
                                                                                                                                • SHA256 f76c45ac8440c5a36096d7956bdf933bfff268469d1a73573c7f001f790dafa1
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                aichat.exe
                                                                                                                                • Path C:\Users\Admin\AppData\Local\aichat\aichat.exe
                                                                                                                                • Size 13.1MB
                                                                                                                                • SHA256 b085082eb2af43465549651cb3cd42145861f8f9d7de68b2e37a5671a09c0a68
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                576e87ba-9d4a-41d5-bf56-b246d91bb3b5.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\576e87ba-9d4a-41d5-bf56-b246d91bb3b5.tmp
                                                                                                                                • Size 3KB
                                                                                                                                • SHA256 76d70047b4807be4451f4b1fca67bc65dc38a30082e0babda121eacfedfa4447
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                7f6b90fd-d582-4d78-8e93-6f0ea1c83537.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\7f6b90fd-d582-4d78-8e93-6f0ea1c83537.tmp
                                                                                                                                • Size 15KB
                                                                                                                                • SHA256 d395abcffd748ffe7254798bbfa9294845d5dd99c31f29d8c4025eaa9fc63e87
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                settings.dat
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Crashpad\settings.dat
                                                                                                                                • Size 280B
                                                                                                                                • SHA256 0c6bbe3c88aa97d9ad13c3345d852483a9018a5d1931412d5e88168a238f48ce
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                settings.dat
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Crashpad\settings.dat
                                                                                                                                • Size 280B
                                                                                                                                • SHA256 d5d9927c26eccd0d9aaa573a7a92fbb9eea8aaab4771d249be693d5e27ffc730
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                throttle_store.dat
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Crashpad\throttle_store.dat
                                                                                                                                • Size 20B
                                                                                                                                • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                2dec1a84-7203-49d2-ac31-0d06111e35e0.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\2dec1a84-7203-49d2-ac31-0d06111e35e0.tmp
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 6fd74045d394fe1aeb3f758e156239b311c4483c7cc40158cdfab402516f6a3f
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                temp-index
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                • Size 144B
                                                                                                                                • SHA256 7473c5cc174a05f8b09e444d5c00c02ec898b57168e0a36d01cb10d2feccec47
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                the-real-index
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                • Size 48B
                                                                                                                                • SHA256 ebcb07e0104eb062fbede815b262719cd77ba27a55c15657de43566aaa9d6c55
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                451ef1cb-a485-4f6c-aed8-77756ef8ddcb.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Network\451ef1cb-a485-4f6c-aed8-77756ef8ddcb.tmp
                                                                                                                                • Size 111B
                                                                                                                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                SCT Auditing Pending Reports
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Network\SCT Auditing Pending Reports
                                                                                                                                • Size 2B
                                                                                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                CURRENT
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Site Characteristics Database\CURRENT
                                                                                                                                • Size 16B
                                                                                                                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                MANIFEST-000001
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
                                                                                                                                • Size 41B
                                                                                                                                • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                data_0
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\GrShaderCache\data_0
                                                                                                                                • Size 8KB
                                                                                                                                • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                Submit Download

                                                                                                                                data_1
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\GrShaderCache\data_1
                                                                                                                                • Size 264KB
                                                                                                                                • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                Submit Download

                                                                                                                                data_2
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\GrShaderCache\data_2
                                                                                                                                • Size 8KB
                                                                                                                                • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                Submit Download

                                                                                                                                data_3
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\GrShaderCache\data_3
                                                                                                                                • Size 8KB
                                                                                                                                • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                Submit Download

                                                                                                                                Local State
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\Local State
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 0fcbde15698f46b250f6d26d30823a8f77df4bfe4e2c0d8fdad0e3c310916aaa
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                a11683ca-d6ff-4b7e-a556-20c85625d2b2.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Local\com.aichat.app\EBWebView\a11683ca-d6ff-4b7e-a556-20c85625d2b2.tmp
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 7f08668b7cc63130c3b242443cf192e826ed6bb2f87d484b906a0ca07a1c8c6a
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                file.txt
                                                                                                                                • Path C:\Users\Admin\AppData\Local\file.txt
                                                                                                                                • Size 56B
                                                                                                                                • SHA256 614741c91330a20c85deba6de1d3389fe5c1f183fe6ffce4d6e26262c7e441bc
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                T6MCGA04XKMQYQFQN2LX.temp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\T6MCGA04XKMQYQFQN2LX.temp
                                                                                                                                • Size 22KB
                                                                                                                                • SHA256 34ae4f5ef617079c3c605a10736a2a5b59321ad23e36504586bbc509fffde5ec
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                b4cf0cb13e2321cd.customDestinations-ms
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\b4cf0cb13e2321cd.customDestinations-ms
                                                                                                                                • Size 22KB
                                                                                                                                • SHA256 8787b26118a5081604e2a2222e6c532533f002317553cef89441e5ab928c6b2e
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                settings.dat
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                                                                • Size 40B
                                                                                                                                • SHA256 34fb790ac1cfc239b3c2e55d8ecaa9498b07b9d49499bba8a571927be36cba80
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                Bookmarks
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks
                                                                                                                                • Size 21KB
                                                                                                                                • SHA256 a92252f985393630f98f7fb0cd3b3e1878bc0fcbe4c7debb0959aa29fa7140d2
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                Bookmarksd3c2a59e-fe36-47e3-a65d-c8ab84c4240e.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarksd3c2a59e-fe36-47e3-a65d-c8ab84c4240e.tmp
                                                                                                                                • Size 23KB
                                                                                                                                • SHA256 97ec590fb09105d5d9aa6b42a6e99c61471f44cca46154908efc6e52fb1cf0c6
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                index
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index
                                                                                                                                • Size 24B
                                                                                                                                • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                temp-index
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 385ae6fb81e90551530783621fc9f5b93419efdfcea920ce49bd49bb0bfd7ed7
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                the-real-index
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                • Size 48B
                                                                                                                                • SHA256 b76f8580f17199fb3f51cb7f6968508ed9fe65a321ab52b1049cacabd57fb654
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                messages.json
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                background.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
                                                                                                                                • Size 17KB
                                                                                                                                • SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                twitch.png
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch.png
                                                                                                                                • Size 677B
                                                                                                                                • SHA256 959a810529fcf478d40d02fc418e6223e38bdeba0deae8e83b55028d47bbef6b
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                twitch16.png
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
                                                                                                                                • Size 370B
                                                                                                                                • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                twitch48.png
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
                                                                                                                                • Size 921B
                                                                                                                                • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                colors.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\colors.js
                                                                                                                                • Size 5KB
                                                                                                                                • SHA256 80cc31214c554212050ac62dd04bdb33b012b3b42634ef16f461aca2dc8572fb
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                preferences.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\preferences.js
                                                                                                                                • Size 4KB
                                                                                                                                • SHA256 424634b7911f5002d426d9455139bfe578e0a3d8143a4b5f23597ffc22ec0923
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                stats.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\stats.js
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 f2b7e0086a62415550738764edbd98a22ed7524623343b4276951b8cb2207b52
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                twitch_api.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\twitch_api.js
                                                                                                                                • Size 4KB
                                                                                                                                • SHA256 db2f7f893c141525ecb33ce344471ef44dd457980f1fe138a91759d556b4a002
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                volume.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\utils\volume.js
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 3a30f4a95a4ca688fafa4c5594c039bbba5e5d14187dd1da286e48387d3e3d7e
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                main.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.9_0\main.js
                                                                                                                                • Size 48KB
                                                                                                                                • SHA256 c2d961a8340848930aa0b7141ec03b973639d119756904d35fc8efe1a4cb8ec7
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                3ebfaf1c4dcf4f3b0255.ttf
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\3ebfaf1c4dcf4f3b0255.ttf
                                                                                                                                • Size 316KB
                                                                                                                                • SHA256 5ae3965ae20c8090af12aeafec6882ef41829397f28f554e89fbabdf9069ea7e
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                background.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\background.js
                                                                                                                                • Size 561KB
                                                                                                                                • SHA256 4761b2a40e2d0da01ab6e2fc7a22694d4964cf6738347874d6c9a8f7797b66e7
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                compact.html
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\compact.html
                                                                                                                                • Size 967B
                                                                                                                                • SHA256 aa4fe5f4f3ba3c9525f26863bd96d8193068e4fb0d7c1a10cea08af3107a39ad
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                sidebar-icon-57.png
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\icons\sidebar-icon-57.png
                                                                                                                                • Size 878B
                                                                                                                                • SHA256 f933e3885645efb79fb9c683c14d58a6c324162f7f79c1b2550caeecce708cb2
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                popup.css
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\iadifhcoomlippfncokcbkajgmhjaglm\2.0.0_0\popup.css
                                                                                                                                • Size 85KB
                                                                                                                                • SHA256 e923156474b883000789d5293e0f6fd5719b463c3d4d804d6419af21bee1e682
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                scraping-method-Dq4mm50p.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                service-worker.ts-fle0M1Xd.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
                                                                                                                                • Size 13KB
                                                                                                                                • SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                service-worker-loader.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                                                                                                                • Size 49B
                                                                                                                                • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                1196.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\1196.js
                                                                                                                                • Size 155KB
                                                                                                                                • SHA256 bcfbdb2e6b4172d12b0a34c35983ff6b6e7618cb83ee153f835aca07da70eb8c
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                4032.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\4032.js
                                                                                                                                • Size 23KB
                                                                                                                                • SHA256 59c4efc8651a7b080120ae078fce1ac17f42c9cebebb71cb9f5380dcac9a169e
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                4505.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\4505.js
                                                                                                                                • Size 443KB
                                                                                                                                • SHA256 11af1029768b2991bdbf766aa7db050a766ef7f0a37815c45c9bede78a08a4de
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                5345.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\5345.js
                                                                                                                                • Size 89KB
                                                                                                                                • SHA256 753ed393955ce21fc727702f0322ee6cac894e382af168720607d079e8a89502
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                649.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\649.js
                                                                                                                                • Size 11KB
                                                                                                                                • SHA256 b0fdc98099d5d4d8bdc43eddccacef4a0ab5d3b373aeb2342fce2c728981d66d
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                7565.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\7565.js
                                                                                                                                • Size 39KB
                                                                                                                                • SHA256 a7d9547c5fb459762cb200f1e021dfc0efc9c08297c5349f8599dbafdf2dbb18
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                8116.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\8116.js
                                                                                                                                • Size 41KB
                                                                                                                                • SHA256 8bacfc8b500836ab9415b32b7f3c4c172addf76525bef9a73e2cd84c753e39f8
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                blacklist.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\blacklist.js
                                                                                                                                • Size 76KB
                                                                                                                                • SHA256 cf129d43fd65f2c93eafc53ad899911737aab73564fbec7bdac87b5b0788400e
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                favicon_opera_one.png
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\favicon_opera_one.png
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                reader_mode.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\reader_mode.js
                                                                                                                                • Size 112KB
                                                                                                                                • SHA256 ebb002d9d7d9206bc39d3f44bae6e49b7d694a172a0b1da9934f49c17f433084
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                service_worker.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\service_worker.js
                                                                                                                                • Size 1.1MB
                                                                                                                                • SHA256 055406577738ff3eac762b7d2e7360bac21acf0bb688d829d0acfb9126993de2
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                spotify_frame_interceptor.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.74.0.2_0\spotify_frame_interceptor.js
                                                                                                                                • Size 5KB
                                                                                                                                • SHA256 f25cc540e5212f9f327bfb16702e156d385aa2545bd1b4c572f6a5543d4e7930
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                messages.json
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\_locales\en\messages.json
                                                                                                                                • Size 429B
                                                                                                                                • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                background.js
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\background.js
                                                                                                                                • Size 105KB
                                                                                                                                • SHA256 9a9b0f7b3070d6f47773e487ebf53134c7629c15c4564ca613c3c9a8077b543d
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                content.js.LICENSE.txt
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\content.js.LICENSE.txt
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                Icon_Light_Active.png
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\128\Icon_Light_Active.png
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                Icon_Light_Available_Red.png
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\128\Icon_Light_Available_Red.png
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                Icon_Light_Available_Yellow.png
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\128\Icon_Light_Available_Yellow.png
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                Icon_Light_Neutral.png
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\128\Icon_Light_Neutral.png
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                Icon_Light_Active.png
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Active.png
                                                                                                                                • Size 883B
                                                                                                                                • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                Icon_Light_Available_Red.png
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Available_Red.png
                                                                                                                                • Size 895B
                                                                                                                                • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                Icon_Light_Available_Yellow.png
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Available_Yellow.png
                                                                                                                                • Size 895B
                                                                                                                                • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                Icon_Light_Neutral.png
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Neutral.png
                                                                                                                                • Size 932B
                                                                                                                                • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                index.html
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\index.html
                                                                                                                                • Size 222B
                                                                                                                                • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                rules.json
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\rules.json
                                                                                                                                • Size 839B
                                                                                                                                • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                MANIFEST-000001
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\chrome-extension_jifbgnmbgbdiedhdecealmlgmekpagde_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                • Size 23B
                                                                                                                                • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                1ed4aded-132a-4806-bf40-0bffa17a14cc.tmp9ba4f062-8c83-4880-975b-f186385f0a85.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\1ed4aded-132a-4806-bf40-0bffa17a14cc.tmp9ba4f062-8c83-4880-975b-f186385f0a85.tmp
                                                                                                                                • Size 27KB
                                                                                                                                • SHA256 ad036293bc2f9d442fb3be1c6852e8cd322d80b10ef5d51bd365a87e2ded5679
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                2287b5bf-fa24-495f-9798-85106a4653db.tmp56343324-e251-4475-8f4f-dfe475799cbb.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\2287b5bf-fa24-495f-9798-85106a4653db.tmp56343324-e251-4475-8f4f-dfe475799cbb.tmp
                                                                                                                                • Size 27KB
                                                                                                                                • SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                4302b665-0ed1-4f73-bcae-e1cbdc1ad1e7.tmpe9a9e3d5-a8fe-411f-928e-9dd530e20ac6.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\4302b665-0ed1-4f73-bcae-e1cbdc1ad1e7.tmpe9a9e3d5-a8fe-411f-928e-9dd530e20ac6.tmp
                                                                                                                                • Size 27KB
                                                                                                                                • SHA256 06fad05c51b9041e1eee874086a13075af058630a44e160890f8ad6cc52cd6d6
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                74b95c85-ea51-4988-ae06-91e22308cc3f.tmp70816b0a-f3e0-4e33-b949-b480e1a5056c.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\74b95c85-ea51-4988-ae06-91e22308cc3f.tmp70816b0a-f3e0-4e33-b949-b480e1a5056c.tmp
                                                                                                                                • Size 27KB
                                                                                                                                • SHA256 2812a1a85198aa0c3b5170580573935005cbded7ffac283de2da0085f9e83d64
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                7cf24b28-ca1e-4779-9c26-98079ae52401.tmp9645f79b-dc89-4686-bc90-2193aadd07c6.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\7cf24b28-ca1e-4779-9c26-98079ae52401.tmp9645f79b-dc89-4686-bc90-2193aadd07c6.tmp
                                                                                                                                • Size 27KB
                                                                                                                                • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                8fdf9977-fee9-46ae-a375-9b3050e0dea8.tmp047a631f-1a62-4aa3-8c20-7d850df85f05.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\8fdf9977-fee9-46ae-a375-9b3050e0dea8.tmp047a631f-1a62-4aa3-8c20-7d850df85f05.tmp
                                                                                                                                • Size 27KB
                                                                                                                                • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                93492244-3e82-471a-9713-76f5c13f2f65.tmp09fe6d6e-e0d4-4882-93d6-755413905009.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\93492244-3e82-471a-9713-76f5c13f2f65.tmp09fe6d6e-e0d4-4882-93d6-755413905009.tmp
                                                                                                                                • Size 27KB
                                                                                                                                • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                Network Persistent Statee26f8a57-7d30-420c-b2fd-a1a1765d1a2f.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent Statee26f8a57-7d30-420c-b2fd-a1a1765d1a2f.tmp
                                                                                                                                • Size 59B
                                                                                                                                • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                Opera Custom Icon.icoc590c11b-c32b-4821-a685-27688020d1c3.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Opera Custom Icon.icoc590c11b-c32b-4821-a685-27688020d1c3.tmp
                                                                                                                                • Size 162KB
                                                                                                                                • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                Preferences
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                                • Size 12KB
                                                                                                                                • SHA256 50d48f7a3d17e40657985e815ef6ddbdbcbd754cdf385f383f2ebd69497829b7
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                Preferences4dea4b01-10bf-439b-a746-248d3f98714c.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences4dea4b01-10bf-439b-a746-248d3f98714c.tmp
                                                                                                                                • Size 12KB
                                                                                                                                • SHA256 ba77d4cac6ee5cb40abcf9803c7aec0ac218ee34177ea1557a7a6b8ada7c76bf
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                Preferences645c806c-5f11-4c5f-8337-8525e65a58da.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences645c806c-5f11-4c5f-8337-8525e65a58da.tmp
                                                                                                                                • Size 13KB
                                                                                                                                • SHA256 9bd87d54aa5c824933874be90b699c0600a511202609f6c08ab0b7ccdfdb0102
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                Preferences76028b2c-58fa-4933-95bf-dcca4ad91db2.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences76028b2c-58fa-4933-95bf-dcca4ad91db2.tmp
                                                                                                                                • Size 13KB
                                                                                                                                • SHA256 93ce1ab06395aa8d839025ddc1ae7a779da164024789bf3a6b2eedef5619f045
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                Secure Preferences
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                                                                                • Size 79KB
                                                                                                                                • SHA256 f3cea905d76d07dc0c8304cdae0a050ad93013986ea0e8fb87874001ef18f115
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                Secure Preferences246846a6-1015-4b7f-ace2-2b908865c01b.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences246846a6-1015-4b7f-ace2-2b908865c01b.tmp
                                                                                                                                • Size 120KB
                                                                                                                                • SHA256 ecb4008667d3f5669f0df9290490a80aa064cf60cc7c94b400a127d6e61edc58
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                temp-index
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                                                • Size 648B
                                                                                                                                • SHA256 bbd491bfd901ffa17ab22e7648a90614cca93185660f5b7b14119f656b519582
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                the-real-index
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                • Size 72B
                                                                                                                                • SHA256 59bc33b16bfbfc318f6b273889ed989df7e5b9e01f4309ff98dc7f49ab934b46
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw
                                                                                                                                • Size 429B
                                                                                                                                • SHA256 3169cce78c31666b3a2362b79134cffdf406a6269167986b445e22c97d63a34e
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw05b012f1-0e96-490b-8f52-6fcb644928e6.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw05b012f1-0e96-490b-8f52-6fcb644928e6.tmp
                                                                                                                                • Size 10KB
                                                                                                                                • SHA256 255e07c43f34edc7b7a35e7d49febc6fffbb4054ed96c9c123c3a54a77bd531f
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw092f0301-9f4c-47c1-bcf3-958c8719400b.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw092f0301-9f4c-47c1-bcf3-958c8719400b.tmp
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 a60347c2fb3b1c1dc9e5bca3dcdc62e51f28aad1476bd2454222a15b0c25a486
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw09a51119-fb58-48e4-bcc9-e90c3c394d00.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw09a51119-fb58-48e4-bcc9-e90c3c394d00.tmp
                                                                                                                                • Size 10KB
                                                                                                                                • SHA256 7f5cdd78e3c283bebefacc3db1a09edf851ef3cd2f9f61fe2e3967f3e1d9588f
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw09eb475d-d741-404e-8b33-76e5671f72c1.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw09eb475d-d741-404e-8b33-76e5671f72c1.tmp
                                                                                                                                • Size 7KB
                                                                                                                                • SHA256 d1ef0d12d10f096749ef8d70e606cecb69aa73146f5b250d1606ffe433f90b82
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw09f7c01f-2921-473b-8f1b-8c26a107bacb.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw09f7c01f-2921-473b-8f1b-8c26a107bacb.tmp
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 89976da2a4cbf94ea7c22668a03900323b9056be269b453da063ad739001fbbf
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw0fe4f9e9-a069-4cb9-b9e2-655a0cd6b5e2.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw0fe4f9e9-a069-4cb9-b9e2-655a0cd6b5e2.tmp
                                                                                                                                • Size 10KB
                                                                                                                                • SHA256 42de2d2c074318f3921f85e1d72db6f43cb99a15c8f9b66423419cf34e353a0a
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw10c18e34-e666-42e2-8b45-a0e845a77fb7.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw10c18e34-e666-42e2-8b45-a0e845a77fb7.tmp
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 5dd4735cf5eee52f6c82103fcecce3ad6ec61b9716e16714ea0d5337190b63ff
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw1179a4b6-b458-4a02-9f95-0677b1bc12d0.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw1179a4b6-b458-4a02-9f95-0677b1bc12d0.tmp
                                                                                                                                • Size 10KB
                                                                                                                                • SHA256 e24934defc35324682279cfbc4e5693e284596add9b0382fb9af0fbae31ce10a
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw1433c99e-6bc2-456f-b8fa-789b51c3ecaf.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw1433c99e-6bc2-456f-b8fa-789b51c3ecaf.tmp
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 ee492b7c0f5626b11a350d679a2185af7f03a7005cc1b8294bb0b4ec21f7d09f
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw19ca856d-6fee-463b-9522-6f909507f25b.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw19ca856d-6fee-463b-9522-6f909507f25b.tmp
                                                                                                                                • Size 9KB
                                                                                                                                • SHA256 d5af9891b752b89ce93bee91b99120fc8142a1ad791c692ee4c1db6ea5266e9d
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw1bfee492-0300-463c-869a-4227d0dd4c20.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw1bfee492-0300-463c-869a-4227d0dd4c20.tmp
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 35c050be07f91166cc01a16eebccbad572ec4e82083beb6d950a5becd7e01b65
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw269f00b0-cd2a-4f1e-b700-a1d88e6d7115.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw269f00b0-cd2a-4f1e-b700-a1d88e6d7115.tmp
                                                                                                                                • Size 10KB
                                                                                                                                • SHA256 ac120ed50d5196926b0fc8d1281bd3c0c90177222e76370d02e8baf860e4254b
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw28092587-4448-4cf7-936e-0930463500da.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw28092587-4448-4cf7-936e-0930463500da.tmp
                                                                                                                                • Size 8KB
                                                                                                                                • SHA256 d2b0b3518b574c9a298f45ca2029915672dc3a122c796a39d4d59c65be6e8f1e
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw2cccdd19-11b0-43fd-ace6-cf6f9cf5845e.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw2cccdd19-11b0-43fd-ace6-cf6f9cf5845e.tmp
                                                                                                                                • Size 10KB
                                                                                                                                • SHA256 d60d72c1b2ff29a27f2ae31b0a100601672c9c15980191ad5900ce8bbc8bfe83
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw3adf6125-59a8-4494-9fc6-05f6f95543f7.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw3adf6125-59a8-4494-9fc6-05f6f95543f7.tmp
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 c1ad96763f1f200219f65d13727123deb8b211a4faa1fdb6d703fcdd00ce76f5
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw56949fea-b7f7-4831-9358-2ef6759519d9.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw56949fea-b7f7-4831-9358-2ef6759519d9.tmp
                                                                                                                                • Size 9KB
                                                                                                                                • SHA256 0b65dcb9a805eae12f3dc1f5b41407576b2192c38bdc3afb73af5968b21c0702
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw56c32897-a9f1-47b7-8453-857207c7d607.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw56c32897-a9f1-47b7-8453-857207c7d607.tmp
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 6bb2e19cc854928c454337f62cdfdf3d57bc56201214e5b8c3dd5c5a68ba5141
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw5ba128f2-dea6-4361-a4ef-355326cfc793.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw5ba128f2-dea6-4361-a4ef-355326cfc793.tmp
                                                                                                                                • Size 8KB
                                                                                                                                • SHA256 4d019f7877dec8cee87ebdcddb91367497bc60727151d5d41d276faedc446913
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw5d1ed345-6b83-427b-9506-49536be8c208.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw5d1ed345-6b83-427b-9506-49536be8c208.tmp
                                                                                                                                • Size 11KB
                                                                                                                                • SHA256 598ec59466a752962bf878bfff6cd1f1bebf56c5abcbcad5f7e3a81519f70723
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw6d74515e-150b-4a58-9bcd-a54659353d90.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw6d74515e-150b-4a58-9bcd-a54659353d90.tmp
                                                                                                                                • Size 8KB
                                                                                                                                • SHA256 b8d1c7e8b3fd82b24864f321055a8b577f4a8ba0112aeeebeb3f196c56f97002
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw6e941b21-2292-4784-b2fd-c67641221032.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw6e941b21-2292-4784-b2fd-c67641221032.tmp
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 ad71b6388b51be7f5fe55b554b68bb2db423304951d32dfab43b4278cd22412d
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw8423ee94-7c29-4bc9-970d-535ceedced0a.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw8423ee94-7c29-4bc9-970d-535ceedced0a.tmp
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 c479aba7796a7e420592255cedd54b9f3c8274d22c24dc7bb96b1a9fab031364
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw846372ce-e305-4928-873d-9770cbe88f38.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw846372ce-e305-4928-873d-9770cbe88f38.tmp
                                                                                                                                • Size 7KB
                                                                                                                                • SHA256 e70a981570ae2832381e0969f2f719c2433d57e72eb22b709ebeb10a8d42183a
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw8559711c-8f00-4a58-9c65-ba185b0ab51d.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw8559711c-8f00-4a58-9c65-ba185b0ab51d.tmp
                                                                                                                                • Size 8KB
                                                                                                                                • SHA256 187d2d688a6215d1f616c871b419fcb7adad84bcfcffdae4aea56e77f2e6c9f7
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw86054042-ba8f-477c-80d1-122d48cdf3a0.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw86054042-ba8f-477c-80d1-122d48cdf3a0.tmp
                                                                                                                                • Size 7KB
                                                                                                                                • SHA256 51a92908f4afc19de8316363489f3835244bc23a35794fb036df74801f9b10a9
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw88e6eeea-8ce7-470a-bebe-096afe5bb9f0.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw88e6eeea-8ce7-470a-bebe-096afe5bb9f0.tmp
                                                                                                                                • Size 9KB
                                                                                                                                • SHA256 81c5288b633b6ac07d700d21a003a7f0a179355ea9488e11bd1a88165cf52c44
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw89f3a60a-fc05-4b82-a11f-de426f65e3f0.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw89f3a60a-fc05-4b82-a11f-de426f65e3f0.tmp
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 4eaf0dbe3af093565fe8524bc71d0f5cc920b0a13c10e759a99fc4512bccd800
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw9432da31-301a-4390-9828-78829724ab8f.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw9432da31-301a-4390-9828-78829724ab8f.tmp
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 cf7857e92b0adcff74a600e226e606fdcec901804d4c762eda71775cda12d3a4
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw945699f6-ecb5-471b-ab6d-8eebeb46b6e8.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw945699f6-ecb5-471b-ab6d-8eebeb46b6e8.tmp
                                                                                                                                • Size 541B
                                                                                                                                • SHA256 3999113a71ee8b972e3064368a54b78761511355cdecacf4371df8dca0f85ab2
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw9c935bd0-b06f-4ff4-9849-f0fe92004fea.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.raw9c935bd0-b06f-4ff4-9849-f0fe92004fea.tmp
                                                                                                                                • Size 10KB
                                                                                                                                • SHA256 fce3c5a89f2eba887e483b5d6540c520806c601a5e47970c13f39abbeff002f3
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawa31e120f-05af-484b-9411-5757c9f90ef8.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawa31e120f-05af-484b-9411-5757c9f90ef8.tmp
                                                                                                                                • Size 9KB
                                                                                                                                • SHA256 71fd748479415e0904ba0d56405f34761377283f13f4d635631d152444a81ba8
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawa8489776-293e-49a6-b38c-dd6f28aba4e4.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawa8489776-293e-49a6-b38c-dd6f28aba4e4.tmp
                                                                                                                                • Size 8KB
                                                                                                                                • SHA256 1c9737acf602c005996cd0c7b3bc33ae0d0f7523027ac9a70f890ab119f7edbc
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawb0504f38-6391-441e-b355-72bcf674ceda.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawb0504f38-6391-441e-b355-72bcf674ceda.tmp
                                                                                                                                • Size 7KB
                                                                                                                                • SHA256 b1f33567c0a641d965610b800930187625d1343d52669d6ca865dcdcd3b64204
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawc0612a48-7817-4230-8aa9-1f5b22da1ebd.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawc0612a48-7817-4230-8aa9-1f5b22da1ebd.tmp
                                                                                                                                • Size 11KB
                                                                                                                                • SHA256 47e214986f2846432ba86c1d622e50d6b4ab22b979f21ed7d75b19c8e3588404
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawc16f9228-3612-42c3-99ce-564de72c61b2.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawc16f9228-3612-42c3-99ce-564de72c61b2.tmp
                                                                                                                                • Size 9KB
                                                                                                                                • SHA256 6f86fd928207c4ea557066f29d89be7299cdca65931a469a10f71a15052a41e8
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawc244cd81-3cff-4777-8232-02101b95a976.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawc244cd81-3cff-4777-8232-02101b95a976.tmp
                                                                                                                                • Size 669B
                                                                                                                                • SHA256 333866e8a9f38eb35c9acd6deca2b40053ecbc5b1b16a9dca75e415d47424434
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawc2f57e62-59b9-46ae-993f-6bb791e6fddb.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawc2f57e62-59b9-46ae-993f-6bb791e6fddb.tmp
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 6d0887be87b927add49567281432e46960eeed3c3ed3ead3b9279b4e8a3a8c62
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawc5df20ea-eaa8-4bc3-80dc-1fa0531ee91f.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawc5df20ea-eaa8-4bc3-80dc-1fa0531ee91f.tmp
                                                                                                                                • Size 10KB
                                                                                                                                • SHA256 2efbb908c5c41e6771208976eb4c3a61c62b5ecea531529c780b1d048c86b26a
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawc6978686-f815-4fef-8b00-54a74eb1a78c.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawc6978686-f815-4fef-8b00-54a74eb1a78c.tmp
                                                                                                                                • Size 8KB
                                                                                                                                • SHA256 34d2ff83fe2b545f769e6af7b69b6d9a2eeab0846e6ede47d8a353e92244ae3c
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawc6e0a374-979b-4231-bfb2-85ee27d12d88.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawc6e0a374-979b-4231-bfb2-85ee27d12d88.tmp
                                                                                                                                • Size 11KB
                                                                                                                                • SHA256 e1e87bb17538f4aeb04444db834b9358c73f65e9bcf8455505e2be77c24d54f8
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawcef3fa22-b9cb-4eca-b543-077bbc7b91fe.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawcef3fa22-b9cb-4eca-b543-077bbc7b91fe.tmp
                                                                                                                                • Size 10KB
                                                                                                                                • SHA256 ef5d1d08c3506a2467d084a796a6206c9d035b239225c170932e94088ea558b9
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawd8376356-8f22-4224-8edf-ec5cb2542cf4.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawd8376356-8f22-4224-8edf-ec5cb2542cf4.tmp
                                                                                                                                • Size 973B
                                                                                                                                • SHA256 a7804ae51cecba23b654fafc30866fe1aaf8b3f32d0b52609587a78a3d920130
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawd9ed6655-64bf-48e4-95b9-68f48fec9f25.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawd9ed6655-64bf-48e4-95b9-68f48fec9f25.tmp
                                                                                                                                • Size 781B
                                                                                                                                • SHA256 8fce8c7e734787fc726868f85db35c288a06d475090e924e8bdaf8ac9b2e0893
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawe2761fee-b4ae-4b7f-9745-0df36bccf3ec.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawe2761fee-b4ae-4b7f-9745-0df36bccf3ec.tmp
                                                                                                                                • Size 11KB
                                                                                                                                • SHA256 07262ec22d6a8d4a373bc355421890995ae542834e69fa5da6daefda242cabd5
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawe4c34c30-2024-4231-909a-598036d2d614.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawe4c34c30-2024-4231-909a-598036d2d614.tmp
                                                                                                                                • Size 10KB
                                                                                                                                • SHA256 8086b4ec875436e86d2c9ad864e329e3a56506f102dcedfc3cfb3dfc4d61baa6
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawef0cd791-7d27-4010-957c-1a169f4c4a6e.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawef0cd791-7d27-4010-957c-1a169f4c4a6e.tmp
                                                                                                                                • Size 9KB
                                                                                                                                • SHA256 0f955f35f7f69d3819da18d998f6ccb9cc21af1f974bfe76e5860047815d7954
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawf207610b-f6ce-4bbb-90d5-211412c9998e.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawf207610b-f6ce-4bbb-90d5-211412c9998e.tmp
                                                                                                                                • Size 9KB
                                                                                                                                • SHA256 7adb9eb62361b192e410c6111540acca70617c65aa21e940266f7983c40b8b5e
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawf401b409-63e2-42f0-8125-6da8b499b65c.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawf401b409-63e2-42f0-8125-6da8b499b65c.tmp
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 b668bb330d3c4f51892340852d785795f5eaa3f14fad391f84685e68d3c03bbc
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawf4c0a5ef-a362-4daa-9199-b0f7120e4230.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawf4c0a5ef-a362-4daa-9199-b0f7120e4230.tmp
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 ad92c247cc59a857871fe588c7dfda5d9ad6c7d1c9587f7e4376c0f4f4bf17c6
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawfd75c9c2-b46e-449e-b42d-9409b268509d.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_15a25509-6ba2-4ac2-9ab3-85efed1a249a.rawfd75c9c2-b46e-449e-b42d-9409b268509d.tmp
                                                                                                                                • Size 10KB
                                                                                                                                • SHA256 03719dc14ba773fa76cd1331c2bf097f7df1155a2ec14781a10678ba7b66df99
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                daily_wallpapers.json
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\daily_wallpapers.json
                                                                                                                                • Size 4KB
                                                                                                                                • SHA256 7fdd2937785f48c5518e4cccf5027096f1378046a5cb4e7443819cd6bd2f398b
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                rhs.dat
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\rhs.dat
                                                                                                                                • Size 107KB
                                                                                                                                • SHA256 6f7b6f007f424f9e4da217ea7fb4a54edf5da748095a7b9737b546648d322f3c
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                spotlight_campaigns.json
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\spotlight_campaigns.json
                                                                                                                                • Size 605B
                                                                                                                                • SHA256 9e816bb0378546ce7789748d0fe618a67cbb2656d024137de32c436de78e7b55
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.0.2001212701
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.0.2001212701
                                                                                                                                • Size 327B
                                                                                                                                • SHA256 06a9bd6002ded10c44e9196a3642607b286e86fa91914f8674c9cbc7f3491b78
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.0.2001212701
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.0.2001212701
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 478d66a55aa0b0ba8eb9e93437269e5f8ef6d3b2a94f80c3e0ec5c6f5bbc5355
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.0.20012127011d2bd68b-256b-4576-b54d-58f6514cac89.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.0.20012127011d2bd68b-256b-4576-b54d-58f6514cac89.tmp
                                                                                                                                • Size 388B
                                                                                                                                • SHA256 8659fdd7307f6f17430a00b852f1a4ae6f0f8a569bebdfd7e347b7b6593a5025
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.0.200121270144df26ab-9b4c-4a17-96ca-fab03343818d.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.0.200121270144df26ab-9b4c-4a17-96ca-fab03343818d.tmp
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 3dc74d7ca60239937fd8a299b631ae520c29b573be9a884927d373ac01184a66
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.0.20012127015719340d-8752-4924-806d-9d48bb719678.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.0.20012127015719340d-8752-4924-806d-9d48bb719678.tmp
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 f182862484227ada13c5dfa368103b6104aa4efb20a05b1d4b8b8884228042ba
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.0.200121270189659b18-f696-4a45-b7ab-e402a4f2430c.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.0.200121270189659b18-f696-4a45-b7ab-e402a4f2430c.tmp
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 775e4b7e91e908d7e8062131b9317e87d1f2100db65e77e7d8f67fdcf7a34e3e
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.0.20012127019d50ba2c-102a-44ae-9c7d-1dd6d25977f8.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.0.20012127019d50ba2c-102a-44ae-9c7d-1dd6d25977f8.tmp
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 f49a872cd27325524b342a3fce4ab1f02d82519e9eaa4d0ac7d707fcefd32daf
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.0.20012127019dcaa3f8-cd0a-4000-bbae-33a5deee5e52.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.0.20012127019dcaa3f8-cd0a-4000-bbae-33a5deee5e52.tmp
                                                                                                                                • Size 548B
                                                                                                                                • SHA256 f40ec2e2162d4efc9a859bbe85c0d83a05e09228de5088cb179a147a566b328b
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.0.2001212701bf613bf9-3f63-4795-9506-3a6fff87b6ad.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.0.2001212701bf613bf9-3f63-4795-9506-3a6fff87b6ad.tmp
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 ffba7d1ed82baad195574167c33a3c688bc59e79653dc72dc874114fcb681db2
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.0.2001212701c15817b7-ef99-4737-9a7a-3b92024aa2cc.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.0.2001212701c15817b7-ef99-4737-9a7a-3b92024aa2cc.tmp
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 4d2bc2de5ca9358c279c6306030685143f3d39457e9e457e7870f33073d9e2e7
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.0.2001212701d4a1313e-a78e-4fdb-a192-0247c765ffcf.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.0.2001212701d4a1313e-a78e-4fdb-a192-0247c765ffcf.tmp
                                                                                                                                • Size 486B
                                                                                                                                • SHA256 fa656055dcd7946a4257a7ccbcbe58f9ff5e6fd39815082779161b5368e96b14
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.0.2001212701d77c4445-bd2b-47ef-b889-d20fd2e651bb.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.0.2001212701d77c4445-bd2b-47ef-b889-d20fd2e651bb.tmp
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 a78733d9db4292188de0ec3c214a5eac9aa8de876fdf08a37688cee39fcfb813
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.0.2001212701db6bf781-c14b-4e32-8401-b69826927315.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.0.2001212701db6bf781-c14b-4e32-8401-b69826927315.tmp
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 e854a831512b291e9c7c0191940ebbb66918a748ee4db08a997fabd47916dddb
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.1.479862049
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.1.479862049
                                                                                                                                • Size 171B
                                                                                                                                • SHA256 b9c9132a144f47d3528d5518ca9328f7e8456892cd3ab482e6469734370fe762
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.1.47986204911f2b0b1-11f2-464e-8c4a-c468a59610d0.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.1.47986204911f2b0b1-11f2-464e-8c4a-c468a59610d0.tmp
                                                                                                                                • Size 224B
                                                                                                                                • SHA256 adf8575d851fe7f7abfe4fac9d228d405482fa28c56657df21071de3bd45809a
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.1.4798620497859f67e-954c-4177-ac5c-e091c4885f22.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.1.4798620497859f67e-954c-4177-ac5c-e091c4885f22.tmp
                                                                                                                                • Size 224B
                                                                                                                                • SHA256 3e9fb7f389893896c64c172c1556520b743d93c255bacb50771ce54f967386cf
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.1.479862049c33cc077-7bd0-4253-94ef-dddee321a3cb.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.1.479862049c33cc077-7bd0-4253-94ef-dddee321a3cb.tmp
                                                                                                                                • Size 200B
                                                                                                                                • SHA256 272875fcc75de9872d4782a5733b9656a3743d303476522f08bf0667ec58b18b
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.1.479862049d039b47d-613b-43a4-a0dc-272fd9356a97.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.1.479862049d039b47d-613b-43a4-a0dc-272fd9356a97.tmp
                                                                                                                                • Size 224B
                                                                                                                                • SHA256 f3f2d6cc35cafd84d62ea3a7210a43c3119ea4b109ea141906243ecd1b5d3311
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                ssdfp6020.1.479862049e94db651-1a8b-4f2a-a9dc-d0ed23e9ac92.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6020.1.479862049e94db651-1a8b-4f2a-a9dc-d0ed23e9ac92.tmp
                                                                                                                                • Size 224B
                                                                                                                                • SHA256 029b56cd4f3c2538411b96639ff81b9ba74bc54617a321f72724ad054776614e
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                suggestions_cache.json1c6af326-4817-4d1b-b316-81b62eff9155.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\suggestions_cache.json1c6af326-4817-4d1b-b316-81b62eff9155.tmp
                                                                                                                                • Size 795KB
                                                                                                                                • SHA256 33ac27a961735669e8d17b8d76b9c25169f7db9eaf47aa032b128eeae3dc7082
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                Local State0cc3c90b-136a-4fcb-b97c-1a44db582886.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State0cc3c90b-136a-4fcb-b97c-1a44db582886.tmp
                                                                                                                                • Size 4KB
                                                                                                                                • SHA256 7525a2f13461b015c96784535527ea69118bd80c4b4ce450f4b20a8358ccd6f1
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                VariationsSafeSeedV2
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSafeSeedV2
                                                                                                                                • Size 19B
                                                                                                                                • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                VariationsSeedV20fe1a07a-53f7-4c13-b8d7-c873d9ac1114.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\VariationsSeedV20fe1a07a-53f7-4c13-b8d7-c873d9ac1114.tmp
                                                                                                                                • Size 11B
                                                                                                                                • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                clipboard_injection_guard_rules.json
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\clipboard_injection_guard_rules.json
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 b8d84b82da3d90323de6cf1b4e3594bf7acb99101c72379b10f4b982f82bd487
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                Submit Download

                                                                                                                                metadata.jsonef5b006c-17ab-443e-8113-a620e040d4cd.tmp
                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\extensions_crx_cache\metadata.jsonef5b006c-17ab-443e-8113-a620e040d4cd.tmp
                                                                                                                                • Size 13B
                                                                                                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                Submit Download

                                                                                                                                manifest.json
                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2576_515388648\manifest.json
                                                                                                                                • Size 135B
                                                                                                                                • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                Submit Download

                                                                                                                                memory/1308-805-0x00007FFDCCEE0000-0x00007FFDCCEE1000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/1308-806-0x00007FFDCC1D0000-0x00007FFDCC1D1000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/1524-92-0x0000026EA8670000-0x0000026EA8692000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/1524-99-0x0000026EA8930000-0x0000026EA89E2000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/1524-98-0x0000026EA8910000-0x0000026EA892E000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/1524-101-0x0000026EA8C60000-0x0000026EA8C7E000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/1524-100-0x0000026EA86F0000-0x0000026EA86FA000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/2600-3515-0x00007FFDC3F60000-0x00007FFDC4086000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/2600-3512-0x00007FFDCA690000-0x00007FFDCA6D8000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/2600-3511-0x00007FFDB7A30000-0x00007FFDB7CB3000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/2600-3513-0x00007FFDC93F0000-0x00007FFDC9C1A000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/2600-3516-0x00007FFDCA8F0000-0x00007FFDCA958000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/2600-3514-0x00007FFDCC230000-0x00007FFDCC2A4000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/2600-3689-0x00007FFDC93F0000-0x00007FFDC9C1A000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/2600-3594-0x00007FFDC93F0000-0x00007FFDC9C1A000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/2600-3510-0x00007FFDCB590000-0x00007FFDCB931000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/2600-3509-0x00007FFDCD2A0000-0x00007FFDCD367000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/2600-3687-0x00007FFDB7A30000-0x00007FFDB7CB3000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/2600-3547-0x00007FFDC93F0000-0x00007FFDC9C1A000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/3052-298-0x00007FFDCD370000-0x00007FFDCD371000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/4856-400-0x00007FFDCD370000-0x00007FFDCD371000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/5476-3542-0x00007FFDCA690000-0x00007FFDCA6D8000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/5476-3540-0x00007FFDB7A30000-0x00007FFDB7CB3000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/5476-3537-0x00007FFDCD500000-0x00007FFDCDBF6000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/5476-3536-0x00007FFDCB590000-0x00007FFDCB931000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/5476-3541-0x00007FFDCA8F0000-0x00007FFDCA958000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/5476-3538-0x00007FFDC3F60000-0x00007FFDC4086000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/5476-3535-0x00007FFDCD2A0000-0x00007FFDCD367000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/5476-3539-0x00007FFDCC230000-0x00007FFDCC2A4000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/6020-3526-0x00007FFDCB590000-0x00007FFDCB931000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/6020-3702-0x00007FFDCB590000-0x00007FFDCB931000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/6020-3528-0x00007FFDC3F60000-0x00007FFDC4086000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/6020-3527-0x00007FFDC93F0000-0x00007FFDC9C1A000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/6020-3525-0x00007FFDCD2A0000-0x00007FFDCD367000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/6020-3529-0x00007FFDB7A30000-0x00007FFDB7CB3000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/6404-3636-0x00007FFDCCEE0000-0x00007FFDCCEE1000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/6404-3635-0x00007FFDCC1D0000-0x00007FFDCC1D1000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/7572-1612-0x00007FFDCD500000-0x00007FFDCDBF6000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/7572-1610-0x00007FFDC3F60000-0x00007FFDC4086000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/7572-1611-0x00007FFDCA690000-0x00007FFDCA6D8000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/7572-1607-0x00007FFDCC230000-0x00007FFDCC2A4000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/7572-1603-0x00007FFDCB590000-0x00007FFDCB931000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/7572-1609-0x00007FFDCA8F0000-0x00007FFDCA958000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/7572-1608-0x00007FFDB7A30000-0x00007FFDB7CB3000-memory.dmp
                                                                                                                                Download

                                                                                                                                memory/7572-1602-0x00007FFDCD2A0000-0x00007FFDCD367000-memory.dmp
                                                                                                                                Download