Overview

overview

8

Static

static

3

winrar-64-...S8.exe

windows10-2004-x64

8

winrar-64-...S8.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/11/2026, 12:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    winrar-64-7.01-installer_SDS4-S8.exe
  • Size 5.2MB
  • Sample261102-pdzfxavy3l
  • SHA256 e4edc66c8f2f4ae03ee102a7fda40f98e4602fd9bdda57ceceea26c99765d789
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryinstaller

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Checks for any installed AV software in registry 1 TTPs 9 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

    Inno Setup installer

    installer
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Script User-Agent 1 IoCs

    Uses user-agent string associated with script host/environment.

  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\winrar-64-7.01-installer_SDS4-S8.exe
    "C:\Users\Admin\AppData\Local\Temp\winrar-64-7.01-installer_SDS4-S8.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5168
    • C:\Users\Admin\AppData\Local\Temp\is-EBA5GTLXNA.tmp\winrar-64-7.01-installer_SDS4-S8.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-EBA5GTLXNA.tmp\winrar-64-7.01-installer_SDS4-S8.tmp" /SL5="$90204,4171849,960512,C:\Users\Admin\AppData\Local\Temp\winrar-64-7.01-installer_SDS4-S8.exe"
      2⤵
      • Downloads MZ/PE file
      • Executes dropped EXE
      • Checks for any installed AV software in registry
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Checks processor information in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      PID:5732
      • C:\Users\Admin\AppData\Local\Temp\is-S80S2LJXSW.tmp\component0_extract\OperaSetup.exe
        "C:\Users\Admin\AppData\Local\Temp\is-S80S2LJXSW.tmp\component0_extract\OperaSetup.exe" --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:a,utm.id:agiSfNgi01a2xeNcJwVwG7zMnZgYTa2utagFNUSY4WQJaxE4kv0kOyd5ask3f2JI05UqIt5MYhSreYRcNX
        3⤵
          PID:3764
          • C:\Users\Admin\AppData\Local\Temp\7zS4BEA7C7A\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS4BEA7C7A\installer.exe --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:a,utm.id:agiSfNgi01a2xeNcJwVwG7zMnZgYTa2utagFNUSY4WQJaxE4kv0kOyd5ask3f2JI05UqIt5MYhSreYRcNX --server-tracking-blob=NDk0NzhhMWIzYjRiMDlhOThjZWFiZTNmYTJjNTI0NWYzMjdiMGQwODhkNTY4OWZjZjNlNDAwZWViZTc0ODU0ZDp7ImNvdW50cnkiOiJVUyIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cyIsInRpbWVzdGFtcCI6IjE3OTM0NDQ0MTQuMzc2MiIsInVzZXJhZ2VudCI6InB5dGhvbi1yZXF1ZXN0cy8yLjMyLjMiLCJ1dG0iOnt9LCJ1dWlkIjoiMGJkYWI5ZTgtMTQwYi00ZTY5LWIyMmQtMGZhNzU1N2M2ODYyIn0=
            4⤵
              PID:5144
              • C:\Users\Admin\AppData\Local\Temp\7zS4BEA7C7A\installer.exe
                C:\Users\Admin\AppData\Local\Temp\7zS4BEA7C7A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x2b4,0x2b8,0x2bc,0x290,0x2c0,0x7ff644934258,0x7ff644934268,0x7ff644934278
                5⤵
                  PID:2264
                • C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\installer.exe
                  "C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\installer.exe" --version
                  5⤵
                    PID:2488
                  • C:\Users\Admin\AppData\Local\Temp\7zS4BEA7C7A\installer.exe
                    "C:\Users\Admin\AppData\Local\Temp\7zS4BEA7C7A\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=5144 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_20261102121408" --session-guid=a9d36480-06dd-4ac5-bd81-8c2992695cd4 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=0C09000000000000
                    5⤵
                      PID:4184
                      • C:\Users\Admin\AppData\Local\Temp\7zS4BEA7C7A\installer.exe
                        C:\Users\Admin\AppData\Local\Temp\7zS4BEA7C7A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x2ac,0x2b0,0x2c0,0x288,0x2c4,0x7ff644934258,0x7ff644934268,0x7ff644934278
                        6⤵
                          PID:5008
                        • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\installer.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\installer.exe" --backend --initial-pid=5144 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081" --session-guid=a9d36480-06dd-4ac5-bd81-8c2992695cd4 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=139.0.6053.22
                          6⤵
                            PID:2072
                            • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\installer.exe
                              C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x2b4,0x2b8,0x2bc,0x290,0x2c0,0x7ff623b14258,0x7ff623b14268,0x7ff623b14278
                              7⤵
                                PID:2796
                              • C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\assistant\assistant_installer.exe
                                "C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
                                7⤵
                                  PID:4820
                                  • C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\assistant\assistant_installer.exe
                                    "C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x61c9cc,0x61c9d8,0x61c9e4
                                    8⤵
                                      PID:3500
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                                      8⤵
                                        PID:4116
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                                          C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x62c9cc,0x62c9d8,0x62c9e4
                                          9⤵
                                            PID:3244
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                                            9⤵
                                              PID:6592
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                10⤵
                                                  PID:468
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                                                    C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7fffdc36aa00,0x7fffdc36aa10,0x7fffdc36aa20
                                                    11⤵
                                                      PID:2116
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                    10⤵
                                                      PID:2884
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                                                        C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7fffdc36aa00,0x7fffdc36aa10,0x7fffdc36aa20
                                                        11⤵
                                                          PID:4648
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2a0,0x2a4,0x2a8,0x24c,0x2ac,0xc87324,0xc87330,0xc8733c
                                                        10⤵
                                                          PID:6076
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                            11⤵
                                                              PID:3176
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                                                                C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7fffdc36aa00,0x7fffdc36aa10,0x7fffdc36aa20
                                                                12⤵
                                                                  PID:1808
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                11⤵
                                                                  PID:6776
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x27c,0x280,0x284,0x278,0x288,0x7fffdc36aa00,0x7fffdc36aa10,0x7fffdc36aa20
                                                                    12⤵
                                                                      PID:5268
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                    11⤵
                                                                      PID:2552
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fffdc36aa00,0x7fffdc36aa10,0x7fffdc36aa20
                                                                        12⤵
                                                                          PID:5304
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\de932af914ba00303d4a2778a383ac9c831101e2.crx"
                                                                7⤵
                                                                  PID:1516
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fffdc36aa00,0x7fffdc36aa10,0x7fffdc36aa20
                                                                    8⤵
                                                                      PID:5608
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1868,i,4596722985707533946,14227564590028317465,524288 --field-trial-handle=1972,i,6255440086375043482,11564371328121625589,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,12321272253200234116,14167377098295941263,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2004 /prefetch:11
                                                                      8⤵
                                                                      • System Time Discovery
                                                                      PID:5748
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1608,i,13630574709785034039,9514469382839100100,262144 --field-trial-handle=1972,i,6255440086375043482,11564371328121625589,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,12321272253200234116,14167377098295941263,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1968 /prefetch:2
                                                                      8⤵
                                                                        PID:5336
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2392,i,3887967262194478208,9628681789929920695,524288 --field-trial-handle=1972,i,6255440086375043482,11564371328121625589,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,12321272253200234116,14167377098295941263,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2504 /prefetch:13
                                                                        8⤵
                                                                          PID:1696
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3344,i,18087835710537294609,16764986478128156085,1572864 --field-trial-handle=1972,i,6255440086375043482,11564371328121625589,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,12321272253200234116,14167377098295941263,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3452 /prefetch:9
                                                                          8⤵
                                                                            PID:2888
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4108,i,5416272431420738939,3669798766627670394,524288 --field-trial-handle=1972,i,6255440086375043482,11564371328121625589,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,12321272253200234116,14167377098295941263,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4116 /prefetch:14
                                                                            8⤵
                                                                              PID:1464
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4552,i,12093253233453089237,5942766680639364566,524288 --field-trial-handle=1972,i,6255440086375043482,11564371328121625589,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,12321272253200234116,14167377098295941263,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4536 /prefetch:12
                                                                              8⤵
                                                                                PID:6812
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4732,i,4215292129666094208,6894153213421752699,1572864 --field-trial-handle=1972,i,6255440086375043482,11564371328121625589,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,12321272253200234116,14167377098295941263,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4788 /prefetch:9
                                                                                8⤵
                                                                                  PID:5620
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4092,i,5950872575341256221,12254658087169685905,524288 --field-trial-handle=1972,i,6255440086375043482,11564371328121625589,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,12321272253200234116,14167377098295941263,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5040 /prefetch:14
                                                                                  8⤵
                                                                                    PID:972
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5128,i,16250314706846090411,11746372652421884120,1572864 --field-trial-handle=1972,i,6255440086375043482,11564371328121625589,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,12321272253200234116,14167377098295941263,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5152 /prefetch:1
                                                                                    8⤵
                                                                                      PID:4480
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1908,i,5521002719065187570,1554796483374692512,524288 --field-trial-handle=1972,i,6255440086375043482,11564371328121625589,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,12321272253200234116,14167377098295941263,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5328 /prefetch:14
                                                                                      8⤵
                                                                                        PID:6512
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                                                                                      7⤵
                                                                                        PID:8916
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7fffdc36aa00,0x7fffdc36aa10,0x7fffdc36aa20
                                                                                          8⤵
                                                                                            PID:4328
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1676,i,13745226974167663604,11998258441142707614,262144 --field-trial-handle=2132,i,2647085676387626468,10369753577052640788,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2484688191662484892,16156272774508515060,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2128 /prefetch:2
                                                                                            8⤵
                                                                                              PID:8980
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3020,i,1827844329684091541,16695650519133183422,524288 --field-trial-handle=2132,i,2647085676387626468,10369753577052640788,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,2484688191662484892,16156272774508515060,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3332 /prefetch:14
                                                                                              8⤵
                                                                                                PID:7348
                                                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
                                                                                          5⤵
                                                                                            PID:4584
                                                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\assistant\assistant_installer.exe
                                                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\assistant\assistant_installer.exe" --version
                                                                                            5⤵
                                                                                              PID:5004
                                                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\assistant\assistant_installer.exe
                                                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x61c9cc,0x61c9d8,0x61c9e4
                                                                                                6⤵
                                                                                                  PID:2376
                                                                                          • C:\Users\Admin\AppData\Local\Temp\is-S80S2LJXSW.tmp\component1_extract\cookie_mmm_irs_ppi_008_585.exe
                                                                                            "C:\Users\Admin\AppData\Local\Temp\is-S80S2LJXSW.tmp\component1_extract\cookie_mmm_irs_ppi_008_585.exe" /silent /ws /psh:agiSfNgi01a2xeNcJwVwEBFwJZyo763h3PmXXoseWS7GfR0XZHpHFtmkCK8fq1033CpZmx5m1A60TbTXXj /cookie:mmm_irs_ppi_008_585_a
                                                                                            3⤵
                                                                                              PID:2760
                                                                                              • C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\common\icarus.exe
                                                                                                C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\common\icarus.exe /icarus-info-path:C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\icarus-info.xml /install /silent /ws /psh:agiSfNgi01a2xeNcJwVwEBFwJZyo763h3PmXXoseWS7GfR0XZHpHFtmkCK8fq1033CpZmx5m1A60TbTXXj /cookie:mmm_irs_ppi_008_585_a
                                                                                                4⤵
                                                                                                  PID:4440
                                                                                                  • C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\avast-av-vps\icarus.exe
                                                                                                    C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\avast-av-vps\icarus.exe /silent /ws /psh:agiSfNgi01a2xeNcJwVwEBFwJZyo763h3PmXXoseWS7GfR0XZHpHFtmkCK8fq1033CpZmx5m1A60TbTXXj /cookie:mmm_irs_ppi_008_585_a /er_master:master_ep_c0f4e6da-9688-4533-babf-ab4c9ac4722d /er_slave:avast-av-vps_slave_ep_bb851be1-6607-4bb7-92fc-77fcb38ae6f6 /slave:avast-av-vps
                                                                                                    5⤵
                                                                                                      PID:3288
                                                                                                    • C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\avast-suite\icarus.exe
                                                                                                      C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\avast-suite\icarus.exe /silent /ws /psh:agiSfNgi01a2xeNcJwVwEBFwJZyo763h3PmXXoseWS7GfR0XZHpHFtmkCK8fq1033CpZmx5m1A60TbTXXj /cookie:mmm_irs_ppi_008_585_a /er_master:master_ep_c0f4e6da-9688-4533-babf-ab4c9ac4722d /er_slave:avast-suite_slave_ep_3df3ac2d-320f-46bc-bcb5-a1f6d7db66cc /slave:avast-suite
                                                                                                      5⤵
                                                                                                        PID:4684
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                                                                                                1⤵
                                                                                                  PID:6732
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                    2⤵
                                                                                                      PID:6156
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                                                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7fffdc36aa00,0x7fffdc36aa10,0x7fffdc36aa20
                                                                                                        3⤵
                                                                                                          PID:7140
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                        2⤵
                                                                                                          PID:2384
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fffdc36aa00,0x7fffdc36aa10,0x7fffdc36aa20
                                                                                                            3⤵
                                                                                                              PID:3888
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2a0,0x2a4,0x2a8,0x278,0x2ac,0xc87324,0xc87330,0xc8733c
                                                                                                            2⤵
                                                                                                              PID:2632
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                3⤵
                                                                                                                  PID:5864
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                                                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7fffdc36aa00,0x7fffdc36aa10,0x7fffdc36aa20
                                                                                                                    4⤵
                                                                                                                      PID:6616
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                    3⤵
                                                                                                                      PID:5468
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                                                                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fffdc36aa00,0x7fffdc36aa10,0x7fffdc36aa20
                                                                                                                        4⤵
                                                                                                                          PID:2164
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                        3⤵
                                                                                                                          PID:5196
                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fffdc36aa00,0x7fffdc36aa10,0x7fffdc36aa20
                                                                                                                            4⤵
                                                                                                                              PID:3620
                                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                                        C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                        1⤵
                                                                                                                          PID:5428
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                                                                                          1⤵
                                                                                                                            PID:3712
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                                                                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fffdc36aa00,0x7fffdc36aa10,0x7fffdc36aa20
                                                                                                                              2⤵
                                                                                                                                PID:5648
                                                                                                                            • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                              C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                              1⤵
                                                                                                                                PID:6520

                                                                                                                              Network

                                                                                                                                    MITRE ATT&CK Enterprise v16

                                                                                                                                    Replay Monitor

                                                                                                                                    Loading Replay Monitor...

                                                                                                                                    Downloads

                                                                                                                                    LUA.txt.ipending.bd59564e
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\Licenses\LUA.txt.ipending.bd59564e
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 7732fa42ebc8652ee3300a086a068f6aa5008cfa0d14948b144e4b06c82efda7
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    ic_detailed_card_protection.svg.ipending.bd59564e
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_detailed_card_protection.svg.ipending.bd59564e
                                                                                                                                    • Size 4KB
                                                                                                                                    • SHA256 3b5ed02b88eaa61b73ca5eb74901e67b037c59bdab031b9e22446647e844d43a
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    ic_detailed_ok.svg.ipending.bd59564e
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_detailed_ok.svg.ipending.bd59564e
                                                                                                                                    • Size 806B
                                                                                                                                    • SHA256 21a1e92a73bd7279a341f01c988f5d888b3be62ddaaf987137e3be88fd3fc407
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    ic_simple_scan_quick.svg.ipending.bd59564e
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_simple_scan_quick.svg.ipending.bd59564e
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 383a2559ead250986f5e0a4064d87bd390a9cc9534e3fdba59017278b616e3df
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    ic_simple_search.svg.ipending.bd59564e
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_simple_search.svg.ipending.bd59564e
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 53266141eb315ca4a041b890355eb2adc86747ab26685920ceaa8b445d925809
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    ic_simple_send_instructions.svg.ipending.bd59564e
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_simple_send_instructions.svg.ipending.bd59564e
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 77e5f4f68f1594bd5e335bfe66806d0842af2618446bbe86e51ec4915a34bcff
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    ic_simple_speed.svg.ipending.bd59564e
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_simple_speed.svg.ipending.bd59564e
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 dde385702c92656f51aafcb18df86946db9d8fd210d960d86dd05d1066866f21
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    ic_simple_status_critical.svg.ipending.bd59564e
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_simple_status_critical.svg.ipending.bd59564e
                                                                                                                                    • Size 832B
                                                                                                                                    • SHA256 f634a0ef02da6aeb89add41ea17f13777b9caee25d6c999899ea2d1a84bdfb31
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    ic_simple_status_critical_filled.svg.ipending.bd59564e
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_simple_status_critical_filled.svg.ipending.bd59564e
                                                                                                                                    • Size 642B
                                                                                                                                    • SHA256 5be8a15bc651ebea89f61f98f1e3890504830616f8f1509a9aa53aa5f690db27
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    ic_simple_webcam_shield.svg.ipending.bd59564e
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\icons\ic_simple_webcam_shield.svg.ipending.bd59564e
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 da09c55a8db732f5401a1a2cef1ce0766259230d66096144b7cb18784629a2a1
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    i-s-714.svg.ipending.bd59564e
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\illustrations\dark\i-s-714.svg.ipending.bd59564e
                                                                                                                                    • Size 21KB
                                                                                                                                    • SHA256 9c21a5bf49b93ec3c0cc8fe99e125c63ea9c7ec352e7585d6a1e3ddb8f45d1e7
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    i-s-714.svg.ipending.bd59564e
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\assets\illustrations\light\i-s-714.svg.ipending.bd59564e
                                                                                                                                    • Size 21KB
                                                                                                                                    • SHA256 00bba47ac741133ad521b28751156179994c2db0e02943c5737b6e78d90a1189
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    locale-en_GB.json.ipending.bd59564e
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\locale-en_GB.json.ipending.bd59564e
                                                                                                                                    • Size 1009KB
                                                                                                                                    • SHA256 06c7b2904a438cd62348c742235be9e9c3c66c67b019896d8c4282e34ebc04d9
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    mainFont_light.css.ipending.bd59564e
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\gui_resources\default_av\mainFont_light.css.ipending.bd59564e
                                                                                                                                    • Size 112KB
                                                                                                                                    • SHA256 957b326bb75c2001f04666f047d85cd84215c923f75af879d1caa21c13906249
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    openvino_auto_batch_plugin.dll
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\openvino_auto_batch_plugin.dll
                                                                                                                                    • Size 14KB
                                                                                                                                    • SHA256 7ac8ebcd6a41e6bc16666b6aeb7b9b9f73d85d1ac92da1390fd9f6c9b30a9277
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    streamback.dll
                                                                                                                                    • Path C:\Program Files\Avast Software\Suite\streamback.dll
                                                                                                                                    • Size 512KB
                                                                                                                                    • SHA256 004644a7ef537376c9be061a805c0877c2008542dd4a76b56779f1efd3debc67
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    config.ori.ipending.bd59564e
                                                                                                                                    • Path C:\ProgramData\Avast Software\Avast\fw\config.ori.ipending.bd59564e
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 be79affc10f1d93f9ae438c6320feed7846bcb0950cd32e8a564eeb59203b6ea
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    macaddr.ori.ipending.bd59564e
                                                                                                                                    • Path C:\ProgramData\Avast Software\Avast\fw\macaddr.ori.ipending.bd59564e
                                                                                                                                    • Size 400KB
                                                                                                                                    • SHA256 397c21a562d5824dd87e2c34a60f2b3e8b678d52a7bc7297ba5828e4d7b9cf4b
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    networks.ori.ipending.bd59564e
                                                                                                                                    • Path C:\ProgramData\Avast Software\Avast\fw\networks.ori.ipending.bd59564e
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 130a4428ee45f3a17252aa797cfaa35d8e71070dcccbc6059b31eaa087c5f5f8
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    ports.ori.ipending.bd59564e
                                                                                                                                    • Path C:\ProgramData\Avast Software\Avast\fw\ports.ori.ipending.bd59564e
                                                                                                                                    • Size 11KB
                                                                                                                                    • SHA256 6c26bf93abfd6f2878b608f6169e46be2365644e9de78c0b9e3177f3d0aff0af
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    rules.ori.ipending.bd59564e
                                                                                                                                    • Path C:\ProgramData\Avast Software\Avast\fw\rules.ori.ipending.bd59564e
                                                                                                                                    • Size 38KB
                                                                                                                                    • SHA256 c6cd6e597abdd5d181ba4a096aa7174d1ed5e008405ebfc60e50d938a40cdeed
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    templates.ori.ipending.bd59564e
                                                                                                                                    • Path C:\ProgramData\Avast Software\Avast\fw\templates.ori.ipending.bd59564e
                                                                                                                                    • Size 210KB
                                                                                                                                    • SHA256 af1c2077d4cf67f864b204290a35e51809c4d8c5349d4ac8ca90c92374a1d6b2
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    servers.def.ipending.bd59564e
                                                                                                                                    • Path C:\ProgramData\Avast Software\Cleanup\servers.def.ipending.bd59564e
                                                                                                                                    • Size 42B
                                                                                                                                    • SHA256 d28867006eceed94995b6db166ada3cc80a7045bb640b3d6e23954bb417665eb
                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                    Submit Download

                                                                                                                                    event_manager.log
                                                                                                                                    • Path C:\ProgramData\Avast Software\Icarus\Logs\event_manager.log
                                                                                                                                    • Size 142B
                                                                                                                                    • SHA256 c73ef6f9b8e7fcfd306e6b769b629b877682fe1a2b85cffc81efab7c7ff8a7e5
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    icarus.log
                                                                                                                                    • Path C:\ProgramData\Avast Software\Icarus\Logs\icarus.log
                                                                                                                                    • Size 56KB
                                                                                                                                    • SHA256 2c0e59d62e8eb1d8856e980fadfe5fd19e8662fd970bfcf71c68917ea3e2bf0d
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    icarus.log
                                                                                                                                    • Path C:\ProgramData\Avast Software\Icarus\Logs\icarus.log
                                                                                                                                    • Size 56KB
                                                                                                                                    • SHA256 80cf7ffe64edd498e156f9680f851f5cd84d4dfac5b5c12d21ca4dd845ba85ec
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    icarus.log
                                                                                                                                    • Path C:\ProgramData\Avast Software\Icarus\Logs\icarus.log
                                                                                                                                    • Size 59KB
                                                                                                                                    • SHA256 c3c93615c0dff3cc1dfa81e423957a78eda20a7db6962f25e2309d116b3ae46c
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    icarus.log
                                                                                                                                    • Path C:\ProgramData\Avast Software\Icarus\Logs\icarus.log
                                                                                                                                    • Size 73KB
                                                                                                                                    • SHA256 070fc3078b44916ce3497be7d9b18877b24cf475f764ed69306b6c20964e77dd
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    icarus.log
                                                                                                                                    • Path C:\ProgramData\Avast Software\Icarus\Logs\icarus.log
                                                                                                                                    • Size 120KB
                                                                                                                                    • SHA256 ef2311d50e648ad5a28ee9b829a404ab8d5b395f83df4e64c11089bbe748b193
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    reporting.log
                                                                                                                                    • Path C:\ProgramData\Avast Software\Icarus\Logs\reporting.log
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 2291ab96deb7b47c445fe93b126b26fd9423eb7707de6edf0ba5a143f98a6278
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    sfx.log
                                                                                                                                    • Path C:\ProgramData\Avast Software\Icarus\Logs\sfx.log
                                                                                                                                    • Size 13KB
                                                                                                                                    • SHA256 0d943672fd93819ec3263c8183c515c88f87db2f95b76872d3e6c56645a60b70
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    sfx.log
                                                                                                                                    • Path C:\ProgramData\Avast Software\Icarus\Logs\sfx.log
                                                                                                                                    • Size 13KB
                                                                                                                                    • SHA256 035715f2e2799005934206483d56726f9323ec1c086a314d549472802911ba3a
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    icarus.ini
                                                                                                                                    • Path C:\ProgramData\Avast Software\Icarus\avast-suite\icarus.ini
                                                                                                                                    • Size 781B
                                                                                                                                    • SHA256 4777a01f9d2414c75ce71a7228b4e30f58bdb369de5f1f034f32969f752b56fa
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    temporary_proxy.ini
                                                                                                                                    • Path C:\ProgramData\Avast Software\Icarus\settings\temporary_proxy.ini
                                                                                                                                    • Size 278B
                                                                                                                                    • SHA256 8e511706c04e382e58153c274138e99a298e87e29e12548d39b7f3d3442878b9
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    installer.exe
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\installer.exe
                                                                                                                                    • Size 8.6MB
                                                                                                                                    • SHA256 8246d9b80b651388263bad3b113ceaa7eae76a22bc19ad52bf8728ea1d40f37b
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    Opera Browser.lnk
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\Opera Browser.lnk
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 d69b83599cbb0f9a1a2c53cee6854f65dd421cff389828ab9b1803cc824d21bc
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    additional_file0.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\additional_file0.tmp
                                                                                                                                    • Size 2.9MB
                                                                                                                                    • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    assistant_installer.exe
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\assistant\assistant_installer.exe
                                                                                                                                    • Size 2.4MB
                                                                                                                                    • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    dbgcore.dll
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\assistant\dbgcore.dll
                                                                                                                                    • Size 196KB
                                                                                                                                    • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    dbghelp.dll
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\assistant\dbghelp.dll
                                                                                                                                    • Size 1.8MB
                                                                                                                                    • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                                                                                    • Size 3.7MB
                                                                                                                                    • SHA256 ddee330dfaf285dfb3e7e12600af030580ffd36042a37e1515dc030ceaebd245
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    installer_prefs_include.json
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\installer_prefs_include.json
                                                                                                                                    • Size 243B
                                                                                                                                    • SHA256 1d63d13bf7d5a0b6a2c4e54f23951973e5227b661c176374bddf24cc81c6e7ad
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    installer_prefs_include.jsona2e9a2aa-f2fa-47b6-83eb-f69b08916aa4.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\installer_prefs_include.jsona2e9a2aa-f2fa-47b6-83eb-f69b08916aa4.tmp
                                                                                                                                    • Size 258B
                                                                                                                                    • SHA256 bd34ec7e40b1153078ce195ca7be521a6d7ea8826b167ef0e4c1d04b57083307
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    installer_prefs_include.jsonbb8b981d-c08b-4997-aba7-5fbefd2355a9.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\b998b574-6457-4417-be25-b660bce73035 Opera Installer Temp\opera_package_202611021214081\installer_prefs_include.jsonbb8b981d-c08b-4997-aba7-5fbefd2355a9.tmp
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 93b292f80d9f0fa4565a3eb4964cd539f1b44b8edaa1d1583fe63c34f8e6d72a
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    installer.exe
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\7zS4BEA7C7A\installer.exe
                                                                                                                                    • Size 8.6MB
                                                                                                                                    • SHA256 82e4b2505e5407908cb8b0209959a1a65875e9c4022fbc5ba413d01c744ee6bf
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    winrar-64-7.01-installer_SDS4-S8.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\is-EBA5GTLXNA.tmp\winrar-64-7.01-installer_SDS4-S8.tmp
                                                                                                                                    • Size 4.3MB
                                                                                                                                    • SHA256 dcbab07aa57abc62b3c90ba58cbaa0bfb77d0bbed023203f4f00702a69eba9ec
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    Avast_One.png
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\is-S80S2LJXSW.tmp\Avast_One.png
                                                                                                                                    • Size 42KB
                                                                                                                                    • SHA256 2ddd50ca3bb30387c309b0a627cc14f2820352679caa1d59f0dd35aed9540453
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    Opera_new.png
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\is-S80S2LJXSW.tmp\Opera_new.png
                                                                                                                                    • Size 51KB
                                                                                                                                    • SHA256 3f63f320e919830fb21fff8dbd82509ecc8330c89513163daedb1b7687a0a529
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    component0
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\is-S80S2LJXSW.tmp\component0
                                                                                                                                    • Size 3.2MB
                                                                                                                                    • SHA256 a4fc78b8c8fd816b94b463c572d69e91eebceb1d43359b3a963177416091a819
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    OperaSetup.exe
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\is-S80S2LJXSW.tmp\component0_extract\OperaSetup.exe
                                                                                                                                    • Size 3.2MB
                                                                                                                                    • SHA256 f3219d084ee11f5486a712c7c569dbb147a910db3288046ce49d3788151a52d5
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    component1
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\is-S80S2LJXSW.tmp\component1
                                                                                                                                    • Size 782KB
                                                                                                                                    • SHA256 4a59596213b8e401401fad6249213596400943f72f98d8810c48538374137f52
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    cookie_mmm_irs_ppi_008_585.exe
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\is-S80S2LJXSW.tmp\component1_extract\cookie_mmm_irs_ppi_008_585.exe
                                                                                                                                    • Size 1.7MB
                                                                                                                                    • SHA256 2ab4329fb77df9f5b70ac45d9fc005f019c8ef930eabf82e6a10052f9cbeec2d
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    mainlogo.png
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\is-S80S2LJXSW.tmp\mainlogo.png
                                                                                                                                    • Size 171KB
                                                                                                                                    • SHA256 6dcc06642e538dc9a800fd95dbac995d5c436ba3c5349fbfe705aa693e4a91e8
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    winrar-64-7.01-installer.exe
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\is-S80S2LJXSW.tmp\winrar-64-7.01-installer.exe
                                                                                                                                    • Size 1.6MB
                                                                                                                                    • SHA256 2891dba57abeaa9c2d59e256a2c7eb57474b5d0f76af5e825475112a7e93a209
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    yes.png
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\is-S80S2LJXSW.tmp\yes.png
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 618d2aa1e529c55347db75768807ef36f12e24694f035ba23bf5f2fcdeb26d66
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    favicon_opera_one.png
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1516_1470186376\CRX_INSTALL\favicon_opera_one.png
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    manifest.json
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1516_1470186376\CRX_INSTALL\manifest.json
                                                                                                                                    • Size 3KB
                                                                                                                                    • SHA256 80342632811e45efae4c6c3ab1134ded21b2de9119a2c6cadaccca5797d4b46f
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    reader_mode.js
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1516_1470186376\CRX_INSTALL\reader_mode.js
                                                                                                                                    • Size 112KB
                                                                                                                                    • SHA256 e904e1871f448ad76ca9f1069d58edc269ca4de3e936488fa51a9a9c55fb3293
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    service_worker.js
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1516_1470186376\CRX_INSTALL\service_worker.js
                                                                                                                                    • Size 1.1MB
                                                                                                                                    • SHA256 16b7aeb711b7d8d65fc76ab0abf22a56dec65e43fd74a40fbed7c7db77d76554
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    spotify_frame_interceptor.js
                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1516_1470186376\CRX_INSTALL\spotify_frame_interceptor.js
                                                                                                                                    • Size 5KB
                                                                                                                                    • SHA256 1c0bffb9971b48b5bd388112639d5e62b5dc5c5a1d1778690e46bdb4f0d756e4
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    settings.dat
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                                                                    • Size 40B
                                                                                                                                    • SHA256 cb52540f53a351c03cb00f7f63481b92642464ec455948bb8033170e7371250d
                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                    Submit Download

                                                                                                                                    temp-index
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                    • Size 336B
                                                                                                                                    • SHA256 751dd402875aa5cc7e314b8b32212e2e4aa16b0378dbfb9e8233d5ee8d7cdd45
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    the-real-index
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\wasm\index-dir\the-real-index
                                                                                                                                    • Size 48B
                                                                                                                                    • SHA256 e02a499421b03004eb25fab4f954ac4afd12a689b08ac0b9de677fd894ee6a21
                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                    Submit Download

                                                                                                                                    data_0
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_0
                                                                                                                                    • Size 8KB
                                                                                                                                    • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                    Submit Download

                                                                                                                                    data_1
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_1
                                                                                                                                    • Size 264KB
                                                                                                                                    • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                    Submit Download

                                                                                                                                    data_2
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_2
                                                                                                                                    • Size 8KB
                                                                                                                                    • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                    Submit Download

                                                                                                                                    data_3
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_3
                                                                                                                                    • Size 8KB
                                                                                                                                    • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                    Submit Download

                                                                                                                                    SCT Auditing Pending Reports
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports
                                                                                                                                    • Size 2B
                                                                                                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                    Submit Download

                                                                                                                                    Preferences041dfd7c-e6fa-43b0-962f-5f85434957e1.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences041dfd7c-e6fa-43b0-962f-5f85434957e1.tmp
                                                                                                                                    • Size 11KB
                                                                                                                                    • SHA256 2794bd691e24952ab2fce61ee700af12df7893c8804e814124e54c4edb98bfea
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    index
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index
                                                                                                                                    • Size 24B
                                                                                                                                    • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                    Submit Download

                                                                                                                                    temp-index
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                                                    • Size 96B
                                                                                                                                    • SHA256 bed171e4ff60b415615e4dd1f05e67f38b7b569c6a81a54611657b3748070330
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    the-real-index
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                    • Size 72B
                                                                                                                                    • SHA256 fd6b03e18be8b3b727d9285aa24f81ceddafe126eefe3fe55eeeaebd923f0053
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    CURRENT
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Site Characteristics Database\CURRENT
                                                                                                                                    • Size 16B
                                                                                                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                    Submit Download

                                                                                                                                    session_faf80887-9e43-409b-82fb-97d3f8b96938.raw
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_faf80887-9e43-409b-82fb-97d3f8b96938.raw
                                                                                                                                    • Size 445B
                                                                                                                                    • SHA256 7da7a4c3c95e84f98eb9599d20ef7cec7a6116ccc1292751de455c95977c3b9b
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    session_faf80887-9e43-409b-82fb-97d3f8b96938.raw49a45991-03c6-4cc8-a051-d4978d3714fe.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_faf80887-9e43-409b-82fb-97d3f8b96938.raw49a45991-03c6-4cc8-a051-d4978d3714fe.tmp
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 fd6024bdc5f98e682e6bbd606d49190972cd77e0c613dc7f88c5ede8ec1e26b9
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    session_faf80887-9e43-409b-82fb-97d3f8b96938.raw5d6cef7e-a54a-4f68-b53f-703e6646318d.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_faf80887-9e43-409b-82fb-97d3f8b96938.raw5d6cef7e-a54a-4f68-b53f-703e6646318d.tmp
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 f71ce3422632cf9b7bfe3215e9a6364e5cf977a189c91c0f4a991e2920d51669
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    session_faf80887-9e43-409b-82fb-97d3f8b96938.raw6518ad0c-facd-44b8-9a43-4967664988ac.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_faf80887-9e43-409b-82fb-97d3f8b96938.raw6518ad0c-facd-44b8-9a43-4967664988ac.tmp
                                                                                                                                    • Size 861B
                                                                                                                                    • SHA256 897e427bed7edb2c67cf11e2dc98684e066971a628415ec5430f3f1b6e731cbc
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    session_faf80887-9e43-409b-82fb-97d3f8b96938.raw657312f7-d00d-4673-b8bf-7eb36d0c7b79.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_faf80887-9e43-409b-82fb-97d3f8b96938.raw657312f7-d00d-4673-b8bf-7eb36d0c7b79.tmp
                                                                                                                                    • Size 685B
                                                                                                                                    • SHA256 9c5b0e637d0971543b37d6674292b35a3916ba6168d1a6bc229c8f0632dff7dc
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    session_faf80887-9e43-409b-82fb-97d3f8b96938.raw65bf3866-f2e9-4459-a8df-d926dbf284fe.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_faf80887-9e43-409b-82fb-97d3f8b96938.raw65bf3866-f2e9-4459-a8df-d926dbf284fe.tmp
                                                                                                                                    • Size 1005B
                                                                                                                                    • SHA256 7607f1f9a52e4367231de5bc08c73c2f4c6d35a26c2968af8577677cef83dfeb
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    session_faf80887-9e43-409b-82fb-97d3f8b96938.raw789b1c5c-7672-4f19-a477-6956219943ed.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_faf80887-9e43-409b-82fb-97d3f8b96938.raw789b1c5c-7672-4f19-a477-6956219943ed.tmp
                                                                                                                                    • Size 557B
                                                                                                                                    • SHA256 64739032de704d3cf44323429adef344fafe40ac6dc498db8525cd0facc0040b
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    session_faf80887-9e43-409b-82fb-97d3f8b96938.raw82ccc913-39af-4b17-8d2e-962d2ba62b4c.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_faf80887-9e43-409b-82fb-97d3f8b96938.raw82ccc913-39af-4b17-8d2e-962d2ba62b4c.tmp
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 73b182d8853d63cd11aee47cf744bb741249176f6b9184e265086c3376f22cff
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    session_faf80887-9e43-409b-82fb-97d3f8b96938.raw963b9d3e-4397-4e26-bc43-935b064ccf33.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_faf80887-9e43-409b-82fb-97d3f8b96938.raw963b9d3e-4397-4e26-bc43-935b064ccf33.tmp
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 a75b543d652782df078fe4c43aa3851976a7fa885235702804dba65d91782ab8
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    session_faf80887-9e43-409b-82fb-97d3f8b96938.rawba028152-1259-4069-b84f-09d0ee14b387.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_faf80887-9e43-409b-82fb-97d3f8b96938.rawba028152-1259-4069-b84f-09d0ee14b387.tmp
                                                                                                                                    • Size 861B
                                                                                                                                    • SHA256 e4b2ef62fc86da4a351f21ebbbc5972f7f3914c631d9f074705e6fab4c42eec9
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    session_faf80887-9e43-409b-82fb-97d3f8b96938.rawd01dadf8-4158-44e4-a126-1214d3440582.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_faf80887-9e43-409b-82fb-97d3f8b96938.rawd01dadf8-4158-44e4-a126-1214d3440582.tmp
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 525613d59ee48dbbe5c03d184db07ab834c03f64457d23b8f78c2b4478070d38
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    session_faf80887-9e43-409b-82fb-97d3f8b96938.rawed35d348-c30d-448b-8c6e-28e059a37168.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_faf80887-9e43-409b-82fb-97d3f8b96938.rawed35d348-c30d-448b-8c6e-28e059a37168.tmp
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 1a35a44e1d8d1a2bff27093845a030a3c2b91b4c3cd9ed10227fbbe0b56581e6
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    session_faf80887-9e43-409b-82fb-97d3f8b96938.raweddbdefe-e2f4-41ea-a5a9-b506bbdb2c78.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_faf80887-9e43-409b-82fb-97d3f8b96938.raweddbdefe-e2f4-41ea-a5a9-b506bbdb2c78.tmp
                                                                                                                                    • Size 845B
                                                                                                                                    • SHA256 c039d5eb84ccd88c458b044ba65030b12a87f9a677e12f02cfe3fb1fbdaf1a00
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    MANIFEST-000001
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\MANIFEST-000001
                                                                                                                                    • Size 41B
                                                                                                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                    Submit Download

                                                                                                                                    ssdfp1516.0.1643178451
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1516.0.1643178451
                                                                                                                                    • Size 203B
                                                                                                                                    • SHA256 383fca82772a92ea76dd001897a2dc0ef4f1edb8f26f97f1f1cc723405edc3ce
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    ssdfp1516.0.16431784515c734e69-85fa-42f8-ab82-cf1fdde27cfb.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1516.0.16431784515c734e69-85fa-42f8-ab82-cf1fdde27cfb.tmp
                                                                                                                                    • Size 265B
                                                                                                                                    • SHA256 0da9a8e1bcde03114ad5e4284d5e83def04742453c57ab5989be140f6c4118f5
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    ssdfp1516.0.1643178451928e2edd-ed39-454e-9529-1db11fa2da57.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1516.0.1643178451928e2edd-ed39-454e-9529-1db11fa2da57.tmp
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 4343de3ecede89a0e79f3cdd8c4ce8d52e5eca1c6dc31457c353167a304d8e08
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    ssdfp1516.0.1643178451e4678db8-9905-47f7-85fc-db300fb35b84.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1516.0.1643178451e4678db8-9905-47f7-85fc-db300fb35b84.tmp
                                                                                                                                    • Size 1014B
                                                                                                                                    • SHA256 acf0c4563845c77aae8cf3c3d471b7cabbb8a1f47c559aa717e3535a25573d87
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    Local State
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 add7751f043be06d0670bca65b53f7d118e66cd1190c9555b5798c7e58cf247a
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    Local State771f3542-8ec7-4e18-847c-575a17e5d7dc.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State771f3542-8ec7-4e18-847c-575a17e5d7dc.tmp
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 721d66d8b0eec0251ed8dbc686db7e0f1059c57db641c593dee2429bb61204be
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    VariationsSeedV23a40cfc5-3c3a-4a89-8a59-e13b4b1dc032.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV23a40cfc5-3c3a-4a89-8a59-e13b4b1dc032.tmp
                                                                                                                                    • Size 19B
                                                                                                                                    • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                    Submit Download

                                                                                                                                    VariationsSeedV2c5a30e6a-59d9-483d-af6a-4eaf88a965f2.tmp
                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2c5a30e6a-59d9-483d-af6a-4eaf88a965f2.tmp
                                                                                                                                    • Size 11B
                                                                                                                                    • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                    Submit Download

                                                                                                                                    persona.ini
                                                                                                                                    • Path C:\Windows\SystemTemp\scoped_dir8916_1599483212\persona.ini
                                                                                                                                    • Size 207B
                                                                                                                                    • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    config.def
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\avast-av-vps\config.def
                                                                                                                                    • Size 569B
                                                                                                                                    • SHA256 44147ee5b46642d032784136fc25dda139e5f94ff32982be0da0225cad7c1fdb
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    icarus_product.dll
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\avast-av-vps\icarus_product.dll
                                                                                                                                    • Size 1.4MB
                                                                                                                                    • SHA256 8b51c1aece63f4918e04613aa39ed586f49d45afb5e0ca353f975547bcc40133
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    product-def.xml
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\avast-av-vps\product-def.xml
                                                                                                                                    • Size 66KB
                                                                                                                                    • SHA256 a1949c62ed549666899a348087e86851d6d77e477ef9505ed534fed19493c582
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    product-info.xml
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\avast-av-vps\product-info.xml
                                                                                                                                    • Size 5KB
                                                                                                                                    • SHA256 40ecf2b01864d7977fae32cf4a24e9fec4869656cdf00d9947ecfb9bbcb98c79
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    policy.def
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\avast-suite\brandingdata\av\licensing\policy.def
                                                                                                                                    • Size 3KB
                                                                                                                                    • SHA256 4a32ed196f5532592dd77f7606f0f57fb13bdb9f8f2b5ae29eb05ea33ad69ba3
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    policy.def
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\avast-suite\brandingdata\bg\licensing\policy.def
                                                                                                                                    • Size 718B
                                                                                                                                    • SHA256 25cb063707d322d112c4f6d9b10dde10a8e381bcbf56f5e50ba853232c79d0dd
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    policy.def
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\avast-suite\brandingdata\tu\licensing\policy.def
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 2f12d0f88b2d4a0d70a546551141dd7506bc447b4abc0678b41390b2fe342fb8
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    config.def
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\avast-suite\config.def
                                                                                                                                    • Size 856B
                                                                                                                                    • SHA256 4d93ebef543212ce21eeb9faf4b826229fc84a09809a5cfbb6f94c8eee1d02a2
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    icarus_product.dll
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\avast-suite\icarus_product.dll
                                                                                                                                    • Size 7.9MB
                                                                                                                                    • SHA256 49c2f38dd3aa6e6f837852114bdcc80bb68d0acdf4541050647ea8ec04366e5f
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    icarus_rvrt.exe
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\avast-suite\icarus_rvrt.exe
                                                                                                                                    • Size 54KB
                                                                                                                                    • SHA256 097709779bf6e7a3f93b65510c1df2a6d28c2c8052874b39d560addfccc44493
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    bug_report.exe
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\common\bug_report.exe
                                                                                                                                    • Size 6.2MB
                                                                                                                                    • SHA256 ae8d7c5cc558990d169119110cab6e22d9c8ee63316deefa2ee4396b3a0bbd97
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    dump_process.exe
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\common\dump_process.exe
                                                                                                                                    • Size 3.9MB
                                                                                                                                    • SHA256 0c4a891db19991cb4351e187c2d2b2163aa5ae2a6fa62da192d99bf189455d67
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    icarus.exe
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\common\icarus.exe
                                                                                                                                    • Size 9.4MB
                                                                                                                                    • SHA256 b4c91224c06fd252173e5ecf6ea1321af540b136eb996f82199ac496e7949655
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    icarus_mod.dll
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\common\icarus_mod.dll
                                                                                                                                    • Size 16KB
                                                                                                                                    • SHA256 452cf7f8e5f64bfae85aaf0f70150342b6e1d74f985e96313fc89fe945a85b8c
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    icarus_ui.exe
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\common\icarus_ui.exe
                                                                                                                                    • Size 12.4MB
                                                                                                                                    • SHA256 e3a4a3dae6db3ed8de3816673a94d73d05cab23a99aea6501956cf55df26a14d
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    product-def.xml
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\common\product-def.xml
                                                                                                                                    • Size 2.6MB
                                                                                                                                    • SHA256 9e89509eef82c39c86dd86786c07ee01128f506db2d7e556934702abc0bedfff
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    product-info.xml
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\common\product-info.xml
                                                                                                                                    • Size 11KB
                                                                                                                                    • SHA256 261a738776da25e5857b469422cd7e50228f91fb2497403a4c79a3d9c541b690
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    setupui.cont
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\common\setupui.cont
                                                                                                                                    • Size 673KB
                                                                                                                                    • SHA256 55cfb5d197bfb7e8674e1c3c13675bad0b5464733682017b93fc9dfef2a51144
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                    Submit Download

                                                                                                                                    epps.edat
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\epps.edat
                                                                                                                                    • Size 80B
                                                                                                                                    • SHA256 c6528b50bbe1265eeb1beb88535e7f6257075daaa245ed693e9ac38511b297bf
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    giet.edat
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\giet.edat
                                                                                                                                    • Size 8B
                                                                                                                                    • SHA256 c2cb92b00918d830aa68e4d5496ca412e3bc86f88444cb3de9d52e62a877b93f
                                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                                    Submit Download

                                                                                                                                    icarus-info.xml
                                                                                                                                    • Path C:\Windows\Temp\asw-758df194-7ab0-4872-a8ea-cb08b1fcc96f\icarus-info.xml
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 78fa896a2b330fc4fab46801cdf1e830e342d88ef25f285aee9e82f6e9deaf89
                                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                                    Submit Download

                                                                                                                                    memory/972-6358-0x0000029A1EE60000-0x0000029A1F023000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/972-5194-0x0000029A1F030000-0x0000029A1F031000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/1464-5082-0x0000020D4D2C0000-0x0000020D4D2C1000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/1464-6350-0x0000020D4D0F0000-0x0000020D4D2B3000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/1696-6419-0x000001C9BF900000-0x000001C9BFAC3000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/1696-5077-0x000001C9BFAD0000-0x000001C9BFAD1000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/1696-5076-0x00007FF815A20000-0x00007FF815A21000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5168-17-0x00000000003F0000-0x00000000004E9000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5168-0-0x00000000003F0000-0x00000000004E9000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-41-0x0000000006520000-0x0000000006660000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-35-0x00000000007C0000-0x0000000000C13000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-190-0x00000000007C0000-0x0000000000C13000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-134-0x0000000006520000-0x0000000006660000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-79-0x0000000006520000-0x0000000006660000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-61-0x00000000007C0000-0x0000000000C13000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-3900-0x00000000007C0000-0x0000000000C13000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-40-0x0000000006520000-0x0000000006660000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-39-0x0000000006520000-0x0000000006660000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-188-0x00000000007C0000-0x0000000000C13000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-33-0x0000000006520000-0x0000000006660000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-32-0x0000000006520000-0x0000000006660000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-31-0x0000000006520000-0x0000000006660000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-26-0x0000000006520000-0x0000000006660000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-6-0x0000000003010000-0x0000000003011000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-25-0x0000000006520000-0x0000000006660000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-19-0x0000000003010000-0x0000000003011000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/5732-18-0x00000000007C0000-0x0000000000C13000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/6512-6359-0x000002476B980000-0x000002476BB43000-memory.dmp
                                                                                                                                    Download

                                                                                                                                    memory/6512-5520-0x000002476BB50000-0x000002476BB51000-memory.dmp
                                                                                                                                    Download