Overview

overview

8

Static

static

3

OperaGXSetup.exe

windows10-2004-x64

8

OperaGXSetup.exe

windows11-21h2-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    21/04/2026, 19:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaGXSetup.exe
  • Size 3.6MB
  • Sample260421-xtltraaz5m
  • SHA256 12d10ec54f04652ff32fdd18eb4d71e2b23411f0f88303d9e4847a7f4c669bcd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 2 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 47 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 25 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 50 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4792
    • C:\Users\Admin\AppData\Local\Temp\7zS8B2FD328\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zS8B2FD328\installer.exe --server-tracking-blob=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
      2⤵
      • Executes dropped EXE
      • Enumerates connected drives
      • Enumerates system info in registry
      • Modifies system certificate store
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4748
      • C:\Users\Admin\AppData\Local\Temp\7zS8B2FD328\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS8B2FD328\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=129.0.5823.64 --initial-client-data=0x28c,0x290,0x294,0x268,0x298,0x7ff7065f8868,0x7ff7065f8874,0x7ff7065f8880
        3⤵
        • Executes dropped EXE
        PID:3156
      • C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\installer.exe" --version
        3⤵
        • Executes dropped EXE
        PID:6120
      • C:\Users\Admin\AppData\Local\Temp\7zS8B2FD328\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\7zS8B2FD328\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=4748 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_20260421200947" --session-guid=80b4b55d-2b95-4e11-80be-b1ca4f32653e --server-tracking-blob=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 --desktopshortcut=1 --wait-for-package --initial-proc-handle=B008000000000000
        3⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:4768
        • C:\Users\Admin\AppData\Local\Temp\7zS8B2FD328\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS8B2FD328\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=129.0.5823.64 --initial-client-data=0x280,0x284,0x288,0x25c,0x298,0x7ff7065f8868,0x7ff7065f8874,0x7ff7065f8880
          4⤵
          • Executes dropped EXE
          PID:5628
        • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe" --backend --initial-pid=4748 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471" --session-guid=80b4b55d-2b95-4e11-80be-b1ca4f32653e --server-tracking-blob=YmQ4MjQwNGE3YmVlMGZjYjQ4OGRmYTJiYmQyMmRiYjhlYzFjYWYxN2VlZWNiNDZkOWQ5ZTZjNmMyYmQ3ZDYwMjp7ImNvdW50cnkiOiJVUyIsImVkaXRpb24iOiJzdGQtMiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhX2d4In0sInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yP3V0bV9zb3VyY2U9UFdOZ2FtZXMmdXRtX21lZGl1bT1wYSZ1dG1fY2FtcGFpZ249UFdOX1VTX1NWUl85NDgxX0REXzUzNDUmdXRtX2lkPTcxYTcxOTVmOWM5ZDQwY2I4N2YwZDU3ZWRhMmM3NmQ3Iiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTEiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzc1NTgxNDgxLjI3ODgiLCJ1c2VyYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTQ2LjAuMC4wIFNhZmFyaS81MzcuMzYiLCJ1dG0iOnsiY2FtcGFpZ24iOiJQV05fVVNfU1ZSXzk0ODFfRERfNTM0NSIsImlkIjoiNzFhNzE5NWY5YzlkNDBjYjg3ZjBkNTdlZGEyYzc2ZDciLCJtZWRpdW0iOiJwYSIsInNvdXJjZSI6IlBXTmdhbWVzIn0sInV1aWQiOiI3YWY0ZGU1MS04YWMyLTQ4MmQtYjJiYS05ODc1ODYwOTljMDgifQ== --desktopshortcut=1 --install-subfolder=130.0.5847.58
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Modifies registry class
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:1768
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff66725e6d8,0x7ff66725e6e4,0x7ff66725e6f0
            5⤵
            • Executes dropped EXE
            PID:4100
          • C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\assistant\assistant_installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • System Location Discovery: System Language Discovery
            • Modifies Internet Explorer settings
            • Suspicious use of WriteProcessMemory
            PID:1120
            • C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0xde4040,0xde404c,0xde4058
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:5816
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:4600
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x994040,0x99404c,0x994058
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:6064
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                • Suspicious use of WriteProcessMemory
                PID:3036
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  • Suspicious use of WriteProcessMemory
                  PID:5692
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7fff7545c540,0x7fff7545c550,0x7fff7545c560
                    9⤵
                    • Executes dropped EXE
                    PID:536
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  • Suspicious use of WriteProcessMemory
                  PID:6140
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0xe0,0x98,0xd4,0xdc,0xd8,0x7fff7545c540,0x7fff7545c550,0x7fff7545c560
                    9⤵
                    • Executes dropped EXE
                    PID:5536
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0x104d830,0x104d83c,0x104d848
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of WriteProcessMemory
                  PID:5548
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:2292
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7fff7545c540,0x7fff7545c550,0x7fff7545c560
                      10⤵
                      • Executes dropped EXE
                      PID:5592
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:2368
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0xd8,0xdc,0x84,0x9c,0x154,0x7fff7545c540,0x7fff7545c550,0x7fff7545c560
                      10⤵
                      • Executes dropped EXE
                      PID:2364
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:1000
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7fff7545c540,0x7fff7545c550,0x7fff7545c560
                      10⤵
                      • Executes dropped EXE
                      PID:5052
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • Drops file in Windows directory
            • Checks processor information in registry
            • Enumerates system info in registry
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of WriteProcessMemory
            PID:3292
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x14c,0x150,0x154,0x148,0x158,0x7fff7545c540,0x7fff7545c550,0x7fff7545c560
              6⤵
              • Executes dropped EXE
              PID:1428
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1684,i,861764943208371898,8835028675899056472,262144 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1828 /prefetch:2
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:2568
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2012,i,4178060769381434067,3853986879485023208,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2028 /prefetch:11
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Time Discovery
              • Enumerates system info in registry
              PID:1740
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2312,i,11809968802689148868,5218043506580522399,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2324 /prefetch:13
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:4404
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3120,i,1039578706196428639,10767796253810986011,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3200 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5800
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3132,i,9298434953696871398,5534212761846515712,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3220 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:5808
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3156,i,2220640665648962674,17400263026218298481,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3260 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:3168
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3144,i,10133068461923531604,17544343534579042081,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3240 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:4808
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3096,i,4396758737939424416,16908802623097589857,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3088 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:3796
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3108,i,2813097395298494104,867207663711534628,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3180 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:4232
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3984,i,18435198623904483440,9772661246893087514,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3992 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:4920
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_gx_splash.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
              6⤵
              • Executes dropped EXE
              PID:6076
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4588,i,5806770529879939912,12944004489896124108,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4632 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:1420
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4804,i,16447957937792355684,16389474773462346072,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4852 /prefetch:9
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:3176
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4964,i,17589369667916129650,2750940093228436779,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5004 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:2420
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5136,i,3735936858905602100,4603366448189780283,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5124 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5368
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5268,i,6978929176502077223,5606873325606084776,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5260 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5840
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5272,i,10451590280827532068,496896804138099812,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5256 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:3440
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5276,i,7773962606642744945,138264562383042201,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5384 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:5880
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5280,i,11042050403500074465,11616196409739384773,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5416 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6024
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5948,i,17551493556118718322,14583519692795654571,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=5952 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6344
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6116,i,3553575652465859871,13882271958357098043,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6124 /prefetch:9
              6⤵
              • Executes dropped EXE
              PID:6368
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6668,i,9010714738778288489,13714162027758170900,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=6672 /prefetch:9
              6⤵
              • Executes dropped EXE
              PID:6412
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7060,i,3754270371509546444,11458577690037726557,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7120 /prefetch:9
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6440
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7104,i,6336012822319407498,13045217289775606941,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7308 /prefetch:9
              6⤵
              • Enumerates system info in registry
              PID:6456
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=7488,i,1480390800565849858,13920885464431179839,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=7496 /prefetch:1
              6⤵
              • Executes dropped EXE
              PID:7644
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7588,i,13607591584808585136,14212300317302610238,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7608 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:7692
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4800,i,205955043507909268,12916761999314090149,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7020 /prefetch:12
              6⤵
              • Executes dropped EXE
              PID:7996
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7916,i,3650041410950436167,12764582729633194730,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7940 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:8108
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7920,i,10616134286012163503,3259833158943646672,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7804 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:8116
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7968,i,17249641778752426819,12181113130006949062,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=7992 /prefetch:14
              6⤵
              • Executes dropped EXE
              PID:8124
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7956,i,16456870962837441410,2522271021621228475,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8400 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:8144
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8268,i,7290182869461737778,7158339768488676464,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8432 /prefetch:14
              6⤵
              • Executes dropped EXE
              PID:8160
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8144,i,38332343889088725,16847548690537993105,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=7824 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:8152
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=8852,i,2735937664669405021,1420340520546317362,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8828 /prefetch:9
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6776
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8960,i,4459611658041712976,4541651919100958268,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9012 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6236
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8900,i,12134824064467009698,9047858169125830671,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8924 /prefetch:14
              6⤵
                PID:6216
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8916,i,7603880263472231931,17947462457710942240,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=8968 /prefetch:14
                6⤵
                  PID:6564
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8932,i,8547331801422133561,687507533919483577,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=8988 /prefetch:14
                  6⤵
                    PID:6188
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9488,i,1806566360042957911,10972609605979718629,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=6948 /prefetch:14
                    6⤵
                      PID:7400
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                      6⤵
                      • Enumerates system info in registry
                      PID:4928
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x288,0x28c,0x290,0x264,0x260,0x7ff77318d738,0x7ff77318d744,0x7ff77318d750
                        7⤵
                          PID:2536
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10168,i,17023114606293070230,616640715155668219,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=3476 /prefetch:14
                        6⤵
                        • Enumerates system info in registry
                        PID:5404
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10328,i,17899827800644668680,15942949905743368369,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10336 /prefetch:14
                        6⤵
                          PID:2528
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=10552,i,1878823055992488010,2739876660378311547,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10556 /prefetch:1
                          6⤵
                          • Enumerates system info in registry
                          PID:7592
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10804,i,2916771578363907935,17502913574865484110,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10160 /prefetch:14
                          6⤵
                          • Enumerates system info in registry
                          PID:6920
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8356,i,7368920087969672028,1720968367776125760,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=8328 /prefetch:14
                          6⤵
                          • Enumerates system info in registry
                          PID:7840
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8316,i,17628820110394007501,11655564387460429082,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=3696 /prefetch:14
                          6⤵
                            PID:6584
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8684,i,16283014922758115024,1410810325789201737,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=10308 /prefetch:14
                            6⤵
                            • Enumerates system info in registry
                            PID:7344
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10856,i,16209370094689286503,8336801031863093550,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=5792 /prefetch:14
                            6⤵
                            • Enumerates system info in registry
                            PID:7880
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8296,i,885457718832564876,11404803769736945147,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=8752 /prefetch:14
                            6⤵
                            • Enumerates system info in registry
                            PID:7580
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=8228,i,1520313957732387313,15375602232268169883,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=8224 /prefetch:9
                            6⤵
                            • Enumerates system info in registry
                            PID:6812
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8484,i,8226744647621276449,11121709397401846935,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=8740 /prefetch:14
                            6⤵
                            • Enumerates system info in registry
                            PID:7060
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9016,i,3584033897250331345,6829710085431228566,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9416 /prefetch:14
                            6⤵
                            • Enumerates system info in registry
                            PID:7280
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9316,i,10433082819977154164,11270661130010526569,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=9320 /prefetch:14
                            6⤵
                            • Enumerates system info in registry
                            PID:7872
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10220,i,12284528231906575003,17204089293559806193,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=10212 /prefetch:14
                            6⤵
                              PID:6196
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8528,i,4656154531291442891,14062106725318847402,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=5380 /prefetch:14
                              6⤵
                                PID:748
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10884,i,1631550837082406786,7243945742430587204,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=8464 /prefetch:14
                                6⤵
                                • Enumerates system info in registry
                                PID:7140
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9436,i,3897526500386315166,17192273965309516068,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=10256 /prefetch:14
                                6⤵
                                • Enumerates system info in registry
                                PID:1132
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=5820,i,755572302782772008,2509882962055584806,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=9304 /prefetch:9
                                6⤵
                                • Enumerates system info in registry
                                PID:8140
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=3788,i,14660917087302295262,14858433351550974895,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=9752 /prefetch:9
                                6⤵
                                  PID:7580
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7800,i,8453262737330718060,11887940662698334646,524288 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=3216 /prefetch:14
                                  6⤵
                                  • Enumerates system info in registry
                                  PID:484
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=9212,i,828162207258629739,3148206557653264807,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=4044 /prefetch:9
                                  6⤵
                                  • Enumerates system info in registry
                                  PID:6576
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 OPR/130.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:platform-software-h264-encoder-in-gpu=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=7076,i,2968440943412812208,3384311092644067339,2097152 --field-trial-handle=1824,i,3348725975827045170,1422719287797841124,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1836,i,688316388597760733,15701578043866316983,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=5424 /prefetch:1
                                  6⤵
                                  • Enumerates system info in registry
                                  PID:4488
                          • C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\assistant\Opera_GX_assistant_130.0.5847.58_Setup.exe_sfx.exe
                            "C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\assistant\Opera_GX_assistant_130.0.5847.58_Setup.exe_sfx.exe"
                            3⤵
                            • Executes dropped EXE
                            • System Location Discovery: System Language Discovery
                            PID:2216
                          • C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\assistant\assistant_installer.exe
                            "C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\assistant\assistant_installer.exe" --version
                            3⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            • Suspicious use of WriteProcessMemory
                            PID:4300
                            • C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\assistant\assistant_installer.exe
                              "C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0xde4040,0xde404c,0xde4058
                              4⤵
                              • Executes dropped EXE
                              • Loads dropped DLL
                              • System Location Discovery: System Language Discovery
                              PID:3424
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe"
                        1⤵
                        • Drops file in Windows directory
                        • Enumerates system info in registry
                        • Modifies data under HKEY_USERS
                        • Modifies registry class
                        • Suspicious behavior: EnumeratesProcesses
                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                        • Suspicious use of AdjustPrivilegeToken
                        • Suspicious use of FindShellTrayWindow
                        • Suspicious use of SendNotifyMessage
                        • Suspicious use of WriteProcessMemory
                        PID:3864
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffa015c728,0x7fffa015c734,0x7fffa015c740
                          2⤵
                            PID:5856
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,5546794635613784226,3958745340719731574,262144 --field-trial-handle=1952,i,148310313722613291,13853269293641965561,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1944 /prefetch:2
                            2⤵
                              PID:3944
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1508,i,6473384431746375789,6206935079462107046,524288 --field-trial-handle=1952,i,148310313722613291,13853269293641965561,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2288 /prefetch:11
                              2⤵
                              • System Time Discovery
                              PID:5220
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,7685273076642868333,17849542220435239867,524288 --field-trial-handle=1952,i,148310313722613291,13853269293641965561,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2500 /prefetch:13
                              2⤵
                                PID:2468
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,702771081389561768,452550213818762028,2097152 --field-trial-handle=1952,i,148310313722613291,13853269293641965561,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3264 /prefetch:1
                                2⤵
                                  PID:440
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3280,i,6374810559878281848,2769049017128525502,2097152 --field-trial-handle=1952,i,148310313722613291,13853269293641965561,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3460 /prefetch:1
                                  2⤵
                                    PID:3308
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4372,i,16357770700591473360,18008319001253801283,2097152 --field-trial-handle=1952,i,148310313722613291,13853269293641965561,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4384 /prefetch:9
                                    2⤵
                                      PID:5460
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4648,i,8395799811348722061,15847590689768215311,2097152 --field-trial-handle=1952,i,148310313722613291,13853269293641965561,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4664 /prefetch:1
                                      2⤵
                                        PID:5176
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5440,i,16814054426547259593,11670538861684187005,524288 --field-trial-handle=1952,i,148310313722613291,13853269293641965561,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5444 /prefetch:14
                                        2⤵
                                          PID:3036
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5440,i,16788557153749481921,12939813361928418164,2097152 --field-trial-handle=1952,i,148310313722613291,13853269293641965561,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5496 /prefetch:1
                                          2⤵
                                            PID:244
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4560,i,16623975024740262574,12879390920968137533,2097152 --field-trial-handle=1952,i,148310313722613291,13853269293641965561,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3580 /prefetch:1
                                            2⤵
                                              PID:2184
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3440,i,5904423002941495809,10869235732312569319,524288 --field-trial-handle=1952,i,148310313722613291,13853269293641965561,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5836 /prefetch:14
                                              2⤵
                                                PID:5264
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3460,i,3649931331111211208,13670900820404938999,524288 --field-trial-handle=1952,i,148310313722613291,13853269293641965561,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3632 /prefetch:14
                                                2⤵
                                                  PID:2940
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3656,i,12232248456831024006,3129126771379010596,524288 --field-trial-handle=1952,i,148310313722613291,13853269293641965561,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5808 /prefetch:14
                                                  2⤵
                                                    PID:1748
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3628,i,13773710292738151640,6025952701857816701,262144 --field-trial-handle=1952,i,148310313722613291,13853269293641965561,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5600 /prefetch:10
                                                    2⤵
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:6276
                                                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                  1⤵
                                                    PID:3964
                                                  • C:\Windows\system32\svchost.exe
                                                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                    1⤵
                                                      PID:4552
                                                    • C:\Windows\system32\wbem\unsecapp.exe
                                                      C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                      1⤵
                                                        PID:4416
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"
                                                        1⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • Enumerates system info in registry
                                                        PID:4528
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7fff7545c540,0x7fff7545c550,0x7fff7545c560
                                                          2⤵
                                                          • Executes dropped EXE
                                                          PID:1672
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                        1⤵
                                                        • Enumerates system info in registry
                                                        PID:1292
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=130.0.5847.58 --initial-client-data=0x280,0x284,0x288,0x21c,0x28c,0x7ff77318d738,0x7ff77318d744,0x7ff77318d750
                                                          2⤵
                                                            PID:6868
                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
                                                            2⤵
                                                              PID:6216

                                                          Network

                                                                MITRE ATT&CK Enterprise v16

                                                                Reconnaissance

                                                                Resource Development

                                                                Initial Access

                                                                Execution

                                                                Persistence

                                                                Boot or Logon Autostart Execution

                                                                1
                                                                T1547

                                                                Registry Run Keys / Startup Folder

                                                                1
                                                                T1547.001

                                                                Event Triggered Execution

                                                                1
                                                                T1546

                                                                Component Object Model Hijacking

                                                                1
                                                                T1546.015

                                                                Privilege Escalation

                                                                Boot or Logon Autostart Execution

                                                                1
                                                                T1547

                                                                Registry Run Keys / Startup Folder

                                                                1
                                                                T1547.001

                                                                Event Triggered Execution

                                                                1
                                                                T1546

                                                                Component Object Model Hijacking

                                                                1
                                                                T1546.015

                                                                Defense Evasion

                                                                Modify Registry

                                                                3
                                                                T1112

                                                                Subvert Trust Controls

                                                                1
                                                                T1553

                                                                Install Root Certificate

                                                                1
                                                                T1553.004

                                                                Credential Access

                                                                Credentials from Password Stores

                                                                1
                                                                T1555

                                                                Credentials from Web Browsers

                                                                1
                                                                T1555.003

                                                                Unsecured Credentials

                                                                1
                                                                T1552

                                                                Credentials In Files

                                                                1
                                                                T1552.001

                                                                Discovery

                                                                Browser Information Discovery

                                                                1
                                                                T1217

                                                                Peripheral Device Discovery

                                                                1
                                                                T1120

                                                                Query Registry

                                                                5
                                                                T1012

                                                                System Information Discovery

                                                                4
                                                                T1082

                                                                System Location Discovery

                                                                1
                                                                T1614

                                                                System Language Discovery

                                                                1
                                                                T1614.001

                                                                System Time Discovery

                                                                1
                                                                T1124

                                                                Lateral Movement

                                                                Collection

                                                                Data from Local System

                                                                1
                                                                T1005

                                                                Command and Control

                                                                Exfiltration

                                                                Impact

                                                                Replay Monitor

                                                                Loading Replay Monitor...

                                                                Downloads

                                                                BookmarkMergedSurfaceOrdering
                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                • Size 6B
                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                BrowsingTopicsState
                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                • Size 414B
                                                                • SHA256 60813e733a102ea4f0b18db837d0939463ac67888a5db7a6f222e723107e94a7
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                the-real-index
                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                • Size 720B
                                                                • SHA256 a48780fa5cc50e61b2ab5332f9da586d5b6f6b6d53cd9ac6d8bb855d7421c897
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                903d9fa0-8f64-4dcf-b3f7-6d554d0047a4.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\903d9fa0-8f64-4dcf-b3f7-6d554d0047a4.tmp
                                                                • Size 7KB
                                                                • SHA256 6ad36eb7b89f4421f065a63ebfc1a77ce85633dc6ece418c8ede9ee08b05868c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                SCT Auditing Pending Reports
                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                • Size 2B
                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                Preferences
                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                • Size 12KB
                                                                • SHA256 c30beb05dbfd479a885f6815bc66f7cc92c00f43cb12d0358a592d078d420e55
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Preferences
                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                • Size 14KB
                                                                • SHA256 c3033e7258a415de5e7400a06443a1f4c49e0fc79d4bc46def83e584e8158127
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Secure Preferences
                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                • Size 17KB
                                                                • SHA256 82f19bdaa200c3a3056c6486f8d9171c832143077338572b10c4c0ee03580c4b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                temp-index
                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                • Size 120B
                                                                • SHA256 858bfd0c99664fee97166c8f42641e5ad20ac3724e89708dad6f706663e45683
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                the-real-index~RFe58c3f7.TMP
                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c3f7.TMP
                                                                • Size 96B
                                                                • SHA256 f60f16db2691f53203985ac9bfbdc53f0864d0130c38050f431bfcda6ffede4a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                • Size 194KB
                                                                • SHA256 d710445e932a9d1f1a212079185d574d2fbfa1ebe2ceac4ac074eaa26ae66243
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                • Size 195KB
                                                                • SHA256 390d3347ac104cac407992cf28af71198a45343b212a05fd3a40e7fa8ecd90d0
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                • Size 195KB
                                                                • SHA256 1037c75b25f20aa4ea80ce5273cc4761c2b1805b84df9bc31845fe430a4ffb0d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                • Size 90KB
                                                                • SHA256 6759ddc55b7f43d8e17c504f78a7c6e7e3a26d36c843446cd20fda8997e2c52b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                • Size 194KB
                                                                • SHA256 cb1d9bce7db7fdf038322ad041096ce05a793485a220aff4b0e9ba3056eae574
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                130.0.5847.58.manifest
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\130.0.5847.58.manifest
                                                                • Size 225B
                                                                • SHA256 b36f65b8206904273866c6a34e99bd0cf4b72dbaa46073d8f9051cb22a64196d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-100.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-100.png
                                                                • Size 2KB
                                                                • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-100_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-100_contrast-white.png
                                                                • Size 1KB
                                                                • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-140.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-140.png
                                                                • Size 3KB
                                                                • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-140_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-140_contrast-white.png
                                                                • Size 2KB
                                                                • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-180.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-180.png
                                                                • Size 3KB
                                                                • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-180_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-180_contrast-white.png
                                                                • Size 3KB
                                                                • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-80.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-80.png
                                                                • Size 1KB
                                                                • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-80_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\150x150Logo.scale-80_contrast-white.png
                                                                • Size 1KB
                                                                • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-100.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\70x70Logo.scale-100.png
                                                                • Size 1KB
                                                                • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-100_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\70x70Logo.scale-100_contrast-white.png
                                                                • Size 1KB
                                                                • SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-140.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\70x70Logo.scale-140.png
                                                                • Size 1KB
                                                                • SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-140_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\70x70Logo.scale-140_contrast-white.png
                                                                • Size 1KB
                                                                • SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-180.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\70x70Logo.scale-180.png
                                                                • Size 2KB
                                                                • SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-180_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\70x70Logo.scale-180_contrast-white.png
                                                                • Size 2KB
                                                                • SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-80.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\70x70Logo.scale-80.png
                                                                • Size 1KB
                                                                • SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-80_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\Assets\70x70Logo.scale-80_contrast-white.png
                                                                • Size 901B
                                                                • SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                CChromaEditorLibrary64.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\CChromaEditorLibrary64.dll
                                                                • Size 145KB
                                                                • SHA256 553d4ef3d07a9d39ffff5f6c181f41627caaf48a5f32d22d99447851069275db
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                CUESDK.x64_2017.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\CUESDK.x64_2017.dll
                                                                • Size 474KB
                                                                • SHA256 a919090c7e2557079bd9313ef0a2cfe25c5d9019ecf6469fcdf0a19e2295a0b1
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                assistant_package
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\assistant_package
                                                                • Size 3.5MB
                                                                • SHA256 283e989014480acf409f36c8e7eb2a9d7b0427a1c196ae84ec12770639b1ca7b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                d3dcompiler_47.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\d3dcompiler_47.dll
                                                                • Size 4.5MB
                                                                • SHA256 22665bbed4ad858371028aef462d2464a193de057b0517831bbdcb33653aced7
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                dxcompiler.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\dxcompiler.dll
                                                                • Size 24.4MB
                                                                • SHA256 77ce4510568bb0148d7f6ce0989e79038f82b2a368d9c5df81d213f852b893c4
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                dxil.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\dxil.dll
                                                                • Size 1.4MB
                                                                • SHA256 20f9803956c1a30d07875043aa8562308374d268fd5bcfdbac3a2438ad39caae
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                files_list
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\files_list
                                                                • Size 4KB
                                                                • SHA256 6205dbe29a39dafc339036dc3aa3f48c6d52bfbb1a146934d5b1341cb124aafa
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                headless_command_resources.pak
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\headless_command_resources.pak
                                                                • Size 2KB
                                                                • SHA256 1bd44fc6f283ffff0af5ead0b9aa74c8b6b922ba6196a1501214906e6017837c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                icudtl.dat
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\icudtl.dat
                                                                • Size 10.4MB
                                                                • SHA256 92cbfb1c00ee305e4d085ef609c346795a1c13bf03d48c1a9dfc80d61a1e9ebc
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                installer.exe
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer.exe
                                                                • Size 9.0MB
                                                                • SHA256 7d1dd50b92b57b961638feb122accf1c670b33807221b9c2336b5d9c2eb2cd79
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                installer_helper_64.exe
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\installer_helper_64.exe
                                                                • Size 649KB
                                                                • SHA256 54a128d52950a6418e813dc64ddeac155a34729adc235d935e573346484b4976
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                libEGL.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\libEGL.dll
                                                                • Size 504KB
                                                                • SHA256 40f20b92ea65b1262afd43dafe21f94d1d383a178d221213c2dc16555ac48440
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                libGLESv2.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\libGLESv2.dll
                                                                • Size 7.5MB
                                                                • SHA256 b4ef5eccd44a67d39cc24692407ff0adb7ae63577966d978dc671f9b2d699846
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                custom_partner_content.json
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\130.0.5847.58\resources\custom_partner_content.json
                                                                • Size 245KB
                                                                • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                57e639eb-adec-463a-915b-9702fe4ba753.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\57e639eb-adec-463a-915b-9702fe4ba753.tmp
                                                                • Size 1KB
                                                                • SHA256 7930488e77ad24ed6b82450c2ef25aa62e5238a09614b267cc9f894ebf19782b
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                browser_assistant.exe
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                • Size 5.2MB
                                                                • SHA256 91455152ee199195352f4f42ef7000c08ac52b4b9149577b8cde0244b1c12c1b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                opera_autoupdate.exe
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                • Size 7.0MB
                                                                • SHA256 39b075bbfa7f2d50b6c012891f9fdbbf418f6ec6c6dc2ff7a14ca5873f0cfe96
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                opera.exe
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                • Size 2.6MB
                                                                • SHA256 3eb1a2f751e85be99426bad0cfa580ca19a608a7e121b2f1cb597f95a5347ea6
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Opera GX Browser.lnk
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\Opera GX Browser.lnk
                                                                • Size 1KB
                                                                • SHA256 20ae901d27c046eacfdb9f615fe722042e1b36670c8aea13254a681dfc474f1e
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                additional_file0.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\additional_file0.tmp
                                                                • Size 2.8MB
                                                                • SHA256 1ef33f3f50727d57dda98c03db5f759fc66315965fda144dbcbe41e3d0720265
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                assistant_installer.exe
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\assistant\assistant_installer.exe
                                                                • Size 2.5MB
                                                                • SHA256 39284ef1695bee19a8fa544f64215eb9fa49dc97b05bca3499d0a2781055929c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                dbgcore.dll
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\assistant\dbgcore.dll
                                                                • Size 222KB
                                                                • SHA256 e26ae1b6f5a828c108addee11e0688eab08142b014366d9ab919c8ca41c1cb14
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                dbghelp.dll
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\assistant\dbghelp.dll
                                                                • Size 1.8MB
                                                                • SHA256 815bf4f300630117dde0c4fb4605550e84bf70a918bc8444f5cb1904f518e32c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                installer_prefs_include.json
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\installer_prefs_include.json
                                                                • Size 363B
                                                                • SHA256 79597e3fec07f647ccdf86c1b058a50c07dc01f8f932461006f4d00b2e6b2510
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                installer_prefs_include.json
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\installer_prefs_include.json
                                                                • Size 1KB
                                                                • SHA256 36fa6b544dd53650d478326454e2ccbe01b6f210290dec5e7c46c2f7d798185d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                installer_prefs_include.json.backup
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\62619135-88d2-455e-99ed-a11f9ed4de4f Opera GX Installer Temp\opera_package_202604212009471\installer_prefs_include.json.backup
                                                                • Size 348B
                                                                • SHA256 ad2990665b293a1e3f7b9f2cfc9730041f8e686d5ed91e1f550846dc2fc7b4bf
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                installer.exe
                                                                • Path C:\Users\Admin\AppData\Local\Temp\7zS8B2FD328\installer.exe
                                                                • Size 8.1MB
                                                                • SHA256 0d0064535a21d43342931657d08d112eb7476607dd3800bd38a6c6bdce7ce2f6
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                04609204-3ee5-41ae-b81e-848c95968846.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3292_1784345495\04609204-3ee5-41ae-b81e-848c95968846.tmp
                                                                • Size 14KB
                                                                • SHA256 d6a7b4d351a6a936a754f7468b3d2ec511690c58e971f4c88b9550eb91acb3df
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                favicon_opera_one.png
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3292_1840955282\CRX_INSTALL\favicon_opera_one.png
                                                                • Size 2KB
                                                                • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                eab568ed-9339-4039-bd8e-0d22d031919c.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3292_1840955282\eab568ed-9339-4039-bd8e-0d22d031919c.tmp
                                                                • Size 5.5MB
                                                                • SHA256 a8b37d7a08098807fcb98672ee246b763650bbb27d65270ee997b2803b99c7c4
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                4167fd08-c77a-47a5-ad3f-5bbaadf5f2e6.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3292_5945275\4167fd08-c77a-47a5-ad3f-5bbaadf5f2e6.tmp
                                                                • Size 472KB
                                                                • SHA256 791c81ca1b16b333a947dc63cc0dee14aba5a4f82a7fd5379e42ed40bea8c41e
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                9d2ea578-3889-4276-b0e9-321fdea2d9d9.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3292_824868194\9d2ea578-3889-4276-b0e9-321fdea2d9d9.tmp
                                                                • Size 2.6MB
                                                                • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Icon_Light_Neutral.png
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3292_824868194\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                • Size 2KB
                                                                • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Opera GX Browser.lnk
                                                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera GX Browser.lnk
                                                                • Size 2KB
                                                                • SHA256 444e5d181fa611214d897ebaee355b353f7ef802af9fa16acd80aee0c43b0cb8
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                default.exc
                                                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                                                                • Size 2B
                                                                • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                OAZPC3C11JKUIWBXJMHZ.temp
                                                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\OAZPC3C11JKUIWBXJMHZ.temp
                                                                • Size 21KB
                                                                • SHA256 2c5036c46af302ab36884a4c3ce54a7a9967d97e5613d718aff23c282ffe511d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                settings.dat
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                • Size 40B
                                                                • SHA256 293a1889c5dd2ee5886a997c7d725a4a4962e8cd55db9d32acf651a40925aa20
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                7cdac24d-ed7b-471b-bcfa-cbac784ad501.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\7cdac24d-ed7b-471b-bcfa-cbac784ad501.tmp
                                                                • Size 162KB
                                                                • SHA256 655050396cfac8e23abeed21171996030b98d079090918ccf869830caa20cf6b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                the-real-index
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                • Size 1KB
                                                                • SHA256 a9a51e7fdc9169a0460f6bd72335e35cd539f025025396cc6cad44243c58d637
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                the-real-index~RFe59d392.TMP
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index~RFe59d392.TMP
                                                                • Size 48B
                                                                • SHA256 d3dca1ed2611b5ad389929ca6ae94df15b06eda1420d5238f18ea2ce1427fb9b
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                CURRENT
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Scripts\CURRENT
                                                                • Size 16B
                                                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                messages.json
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.30.0_0\_locales\en\messages.json
                                                                • Size 2KB
                                                                • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                background.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.30.0_0\background.js
                                                                • Size 17KB
                                                                • SHA256 7c44c782b5e658ceeb46850ec34e316a90d1010d034706f6e5a980f48b8f1398
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                twitch16.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.30.0_0\icons\twitch16.png
                                                                • Size 369B
                                                                • SHA256 c89fb8d1c2db84a460b0d01efb2584710802a85c58efbc6963ce345343c1d1f3
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                twitch48.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.30.0_0\icons\twitch48.png
                                                                • Size 924B
                                                                • SHA256 121a7d5d60e86eab44e0f133b03be279b200a58d2c113e063f46005f1bb20208
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                cos-bridge.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.1.2_0\cos-bridge.js
                                                                • Size 173B
                                                                • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                cos-content.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.1.2_0\cos-content.js
                                                                • Size 502B
                                                                • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                main.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.1.2_0\main.js
                                                                • Size 46KB
                                                                • SHA256 251d7ccab9ed6ea88bf36dff429cb6e1ce196465451fa877c63b97712cb20aca
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                favicon_opera_one.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.31.0.2_0\favicon_opera_one.png
                                                                • Size 2KB
                                                                • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                service_worker.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.31.0.2_0\service_worker.js
                                                                • Size 55KB
                                                                • SHA256 33b0859347e02c9142fd7823b297714b88e474c8278f4778efdfb01f1e6b8034
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                vendors.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.31.0.2_0\vendors.js
                                                                • Size 2.3MB
                                                                • SHA256 5de428dcb2382b4110d4389a413cf40ae435b16b942e37cf9416022c6fb9b67a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                webpage_content_reporter.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.31.0.2_0\webpage_content_reporter.js
                                                                • Size 113KB
                                                                • SHA256 2f60af001760683ef280d0e8fe5cb7d91317a3c2751de436b7547c9798f6ccfc
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                background.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                • Size 86KB
                                                                • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Icon_Light_Neutral.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                • Size 2KB
                                                                • SHA256 2ab8cc6f56fb252cebe597a68724d4a60e604f87014a71f27afa865fab6309de
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                popup.js.LICENSE.txt
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                                                • Size 1KB
                                                                • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                rules.json
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                                                • Size 839B
                                                                • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                MANIFEST-000001
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\chrome-extension_jifbgnmbgbdiedhdecealmlgmekpagde_0.indexeddb.leveldb\MANIFEST-000001
                                                                • Size 23B
                                                                • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                0f31c7c8-50fe-45d7-8368-b05375d848ec.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\0f31c7c8-50fe-45d7-8368-b05375d848ec.tmp
                                                                • Size 27KB
                                                                • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                27bfc129-3e45-4c5b-a9b3-6d625c4d005c.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\27bfc129-3e45-4c5b-a9b3-6d625c4d005c.tmp
                                                                • Size 27KB
                                                                • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                736c04b7-c5cc-477c-9b05-dffad510e304.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\736c04b7-c5cc-477c-9b05-dffad510e304.tmp
                                                                • Size 27KB
                                                                • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                7ce7d518-9471-4090-b677-baced0fdc93f.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\7ce7d518-9471-4090-b677-baced0fdc93f.tmp
                                                                • Size 27KB
                                                                • SHA256 c5b282a24d9ef3ca8b9ec9a229d76f55e76c8765f3d55b13ae9d0f6501c7b0fd
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                d5d2bf51-91e7-4eef-bd73-066308828775.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\d5d2bf51-91e7-4eef-bd73-066308828775.tmp
                                                                • Size 27KB
                                                                • SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Network Persistent State
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                                                • Size 5KB
                                                                • SHA256 02b547c7a65ba0e9448c1992958a2ab51dd58058ed7ed729fd9556039767cc26
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Network Persistent State~RFe5a76a8.TMP
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State~RFe5a76a8.TMP
                                                                • Size 59B
                                                                • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Preferences
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                • Size 12KB
                                                                • SHA256 587ea74f512990e1072f241c832d945ab9a5a2d0c50ea67e647458894f7f044f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Preferences~RFe5997e1.TMP
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences~RFe5997e1.TMP
                                                                • Size 12KB
                                                                • SHA256 6922b78353573108097054c4cfa8bf498158e92a10de050ff1496d0756e8ee6b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Secure Preferences
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                • Size 208KB
                                                                • SHA256 b01b629de74136c968f70ec64745da569f1f48ce7f8a45bed46c19fe047df79f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Secure Preferences~RFe599cc3.TMP
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences~RFe599cc3.TMP
                                                                • Size 83KB
                                                                • SHA256 a1ed382f373ab8a2ca71e19e7acb3f2eff44a4db62003f7d5750dcc3196dc99f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                the-real-index
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                • Size 456B
                                                                • SHA256 dad03838bcea4428a4da17949eeb5e531d21b5e5c9ab568eebe1f11281c35e61
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                the-real-index~RFe59d095.TMP
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59d095.TMP
                                                                • Size 72B
                                                                • SHA256 957acc2f87633059d3245640927e4a2829cc1878533f80f001f750d5b23e9a47
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                MANIFEST-000001
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Site Characteristics Database\MANIFEST-000001
                                                                • Size 41B
                                                                • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                bac9351c-2d7b-4878-a61f-c670a997bfee.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\bac9351c-2d7b-4878-a61f-c670a997bfee.tmp
                                                                • Size 6KB
                                                                • SHA256 557964e09e42e9da65e4a91626ddd355529d2d40851bc24913cebc87d3a86fbb
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                e52c24ea-e2b0-4735-a8e8-59f59552c56c.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\e52c24ea-e2b0-4735-a8e8-59f59552c56c.tmp
                                                                • Size 14KB
                                                                • SHA256 409c63f7d230caa53c02807e29e514b8b5bb5d43e752eb11d3b146678ec2c17c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 13KB
                                                                • SHA256 9c514c4fbd322ec11186ce20362aaacab77667dc90a3943f79d503ea59919764
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 14KB
                                                                • SHA256 eec23c2041362ddd26e7f22309d1395f14d1c74de3cd70378817dafb5b21b890
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 14KB
                                                                • SHA256 19df06b85d3f9584d2d5fd6efb7bf4dfc29caab2663f405014c86bf4cf889abd
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 14KB
                                                                • SHA256 35c0d27fdfa2f07f78af9d02c4e47660e1e7e8bdd9e689eeaa716453e3f55f4a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 541B
                                                                • SHA256 74314693af50422573c0ee9ee57e67d8718a6e039ff272b2a327163d8725c3f6
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 4KB
                                                                • SHA256 0df12ee925011370c10e8da4fedc4093a74fdd673405a1a7f8760dfc42bc3f3e
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 4KB
                                                                • SHA256 d04575f48267531a4e3b150a27d400dd5a6323702c1277999707c12a405e9d3c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 4e4c073ce90e4495892cfe22f82540e1e1453c9abd78822e17d29ecd9270d58c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 12KB
                                                                • SHA256 7bc79b7fd2af42ad203db34cfbc5cb1655811a1e268415df732f7960292b1a73
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 12KB
                                                                • SHA256 956fdeb50d3a7028ea9d29bdac24990bbea1cfc11ae71360154d72015d4f4346
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 12KB
                                                                • SHA256 abd722591bc452a4ff7d48243fb609118bcfef950568c37962b0ef5033d84669
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 13KB
                                                                • SHA256 51056fbfd748a31b463767db9cc3d914068a408e4b9dcfc985461baec2657420
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 13KB
                                                                • SHA256 4c56197d986dba71fd541d26bc0396d7304a3be8071a7c97a157018fab993f34
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 13KB
                                                                • SHA256 24fc9493836dbf24328b270fe34b6d1c6965e7e2d2face361b22aad1251c067f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 13KB
                                                                • SHA256 7edb49c988471df7fd6c7d55c50775af6cf13ba1f1ee0400833b224e20a9cb53
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 14KB
                                                                • SHA256 b3ffcb4ce02852689528002d8e932c20644ff663ef74fdc0411448d460aacb6d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 717B
                                                                • SHA256 07b8efc5552c07f1f3b85b60849eaf785b08034074ad62fef54075d92ad6909e
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 829B
                                                                • SHA256 cb39c53cd32fa37a6bddeebabe2a5711338fe3019c6e799473306b749aec6f25
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 973B
                                                                • SHA256 ce63273d48be2aad7f4f84ca155cf18688585917b9f5d080ba2bf68a72d0315d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 1KB
                                                                • SHA256 883676313dfe6e70212d79c66b48b6d644057bde307336861b30e15cc03823fa
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 1KB
                                                                • SHA256 7ba48201c792f9cea37a5710b0b31881d190de8e96f877141b0e037fb24ecb35
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 13KB
                                                                • SHA256 53e17cbcd2a56fc7a140ea68cd93a4fba868d05499fd4e2990cce834016060b3
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 1KB
                                                                • SHA256 83a73dd9b880cca1c9016e651202245e0254d8b9b29de99872f95a29f73dd202
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 1KB
                                                                • SHA256 cf93721f59c99f940676558c1813e420db62f169f74983330cea4869c3c3f203
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 1KB
                                                                • SHA256 ee81ec41513700a2d34cabd7b31e18f21f8fee51ec9f142351915fd5196ba50d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 1KB
                                                                • SHA256 8da6a43c0e749b337fa1e494c4126808f056adde3c2aa378ec917699d4157d1e
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 2KB
                                                                • SHA256 6f684f69e9e81adb0d0e6e0de68c4b5e93fd1e5c2bd95237a5bfcde0fdf966bf
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 2KB
                                                                • SHA256 ec5c61405c4dc60efd06c68a8c4c1551f23fef08648231f63caff9c40872cdbd
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 2KB
                                                                • SHA256 84b2051b9eb5e38b09ff2e62eb85634d81e41092fb4c62200c7b3b854cdf8332
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 2KB
                                                                • SHA256 987c011dd4627df8785e549799bbebec33b43298d81cd3a142db5e260b9204db
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 2KB
                                                                • SHA256 dd5308b9ca142b67baea0cf459fddb87c56b963b00dc255d2a53e469835d81c4
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 2KB
                                                                • SHA256 e60afb7e506e8724c8aa0279a4f1493c29d57ed1f6f017c54517719c2f4cfbf2
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 2KB
                                                                • SHA256 4c1d1ca100301d19c959a46771560a2c87a3480e886a68919f2cc80c37a42ac9
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 2KB
                                                                • SHA256 d0c59c72dc5609deb5ce4535010563fbc7740dea1df2c4b64e16f9b0343ea013
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 3KB
                                                                • SHA256 ea0e8f21511afa7fb5a5ba617155c6ac32895dd8f3459faf6c8fd7641c10cb7a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 3KB
                                                                • SHA256 2376b9f80706c2edbe3bef15043dac7c82eb32e37ec619c774a2f95681d322ba
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 3KB
                                                                • SHA256 963224b56f61f5121a3836dcf96c30088f2fccc3797fd90070bf3527c16d9aee
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 3KB
                                                                • SHA256 44e5518217061d5c2e6be9f7205e283b2cd3140c954c135952cf2b016d504904
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 3KB
                                                                • SHA256 53bf327f6d826bd6fe84e3895bcfaa2709e9b8521f306fc0655bb608979475b1
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 3KB
                                                                • SHA256 76e6a8e9d851192c9eca0745cae2ffbdc93720f552ad1ed9001be23fcefa0d72
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 3KB
                                                                • SHA256 cc195bcc511a8e8c984283b8d85444d3de6d3ab11acb9009c4bcebd574ab2cfe
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 3KB
                                                                • SHA256 847acd0d0ae7f44d0eba43266682bf61f285d9b15163fc08171e5666a0fa1e92
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 3KB
                                                                • SHA256 5375561c1f1b5aa46dafadd4f328a4f63dec33a4ec8b589279979f10f8ce9ddc
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 3KB
                                                                • SHA256 e9d33f63ef427d670c00f1c75afac3f81010a31d89007d6b69d0e8ac8c839a11
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 3KB
                                                                • SHA256 0db2349759643a202589c0520d2a7c9065d62dab3c8a8d0808f9f7cc1023b19c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 3KB
                                                                • SHA256 7349aed5cefc08abff7ed691a554424af2a9c549395502a9e750ae35078138ca
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 a68e6e8345351d29aefda7c388cda113c382255ce440c763d85d0f1640b63d32
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 4KB
                                                                • SHA256 153a661a9afcd67776159488c15053d67530924682808a903987a29da7a1f3c2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 4KB
                                                                • SHA256 977d6b3f8a986edec5ce1d0f3713c47e1615ecdc37aae6c17a9a98b4a5f470dc
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 6f1a0a0fe3423295e0c0c7600c98faef304c26f3e64daaf360acd03109fe8349
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 4afdacb2a250a89c68449b37fe49091fc9885fb3af98dd27f580080de3e99c5c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 2c9d5e2274e7e0e81eef2615344a7570e0468d560d79c8ec3a965548e8d92c5d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 3e8e821554519052caae55079c7023bc3d37a4ee9afd1cc0412ab38541d18cc6
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 4bd69f6abe9f6e3d24abdc6c20a823a12572df814ef53562c7ec58e366521b9d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 46fffb399cf07dccd0d6cf7ebaefd90ae2604061f387d7aa10cc0c32726ff57a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 c7ba25a52e6aeeac682fe0a9ddc519f28f3b06968b9814a9f4187ad7c03c5261
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 79d69b95a2c19c07d0191c9e2a584385655c6c056ff4c445965b8dc61a0d3eab
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 5f4782e983a53d241c72b9b6ea161fb74a525042f7edb02bf4eb16adfc9f3f4b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 9da44f8769fac33d2095475d5fe0c42e3e35d736bad048fa37d90c7c026ad8b2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 3c5f0a995e81c2cda5b7163173a31802e0ef1ddf24d65e245727528bbad47a46
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 8f00c2020d821461f0d40629b1e9ca98d5ead7275ff82fd9ca8feae85f556532
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 13KB
                                                                • SHA256 0f7590f1931527b3f80ea3ff93c694ddc8adb6f7501753f4d8213537d486d3c1
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 13KB
                                                                • SHA256 739ca7d08fdc1b72e45468b9fca03af64f9a098d85feae2fcd4ccd152d64fc13
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 1KB
                                                                • SHA256 4565873f168a3e1709139451d0527d339bdff3fa78118b4af9cf440c03698202
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 4KB
                                                                • SHA256 f1b3620ace80dfc0f1e47537bbcdcd92631c8f7294077baa57178a3b946522a0
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 301ba5eb0042d5eab82905d8a9492530d3d65d3ef53de59ad478132e8928fdbb
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 f3f07ed59239e0d39180583e21e3936ce3eb4ddb03081feabfdff60151fd3261
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 13KB
                                                                • SHA256 c2278351721455b5e996121d4372ada4ecb23e79a2ae7c0667c5bb4fb111f20c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 4KB
                                                                • SHA256 9ffacc7326a1f826eba5a86d9b7125d7c06c77007f1134f1e3284b85690369a2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 4KB
                                                                • SHA256 a94d0e168044a63e45b715e18f403ef0e7fc19be9e33325299d99b1284366115
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 4KB
                                                                • SHA256 59c0243b2a37d25efdc59d91d66999c1ef77002597dbaee647e7d9a48efa3240
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 4KB
                                                                • SHA256 9ddbc5d4acdfe073a512c51fdee66aea3eff05751e9337f46904ff7d19f04c06
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 5eefcf60245f2b43dc852efe2edfde75b809487ddf60da3df73d4b6ffcfa8c5d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 b74fa7b49f4a0662318095d19aeaf0b8c540ba062144c3ee7c87ae0f653b855b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 6KB
                                                                • SHA256 402a19bd4ce2b1d1ed84c249941534239a25bd638b53b2bcac709fed013fc34a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 f76ef414a5fa0347947392c59a709f441c0dda3d5c9e2151c82f3f4d5db523ea
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 4KB
                                                                • SHA256 8c4bba5c58b07eab95c78c587b3bca7109fd1669eceae179867927506df21c7a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 5KB
                                                                • SHA256 76b9f3e5cf81e5167a0a9e4f2c0195fcad2a4e80a3a05cc42bfba099c6fb483c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 11KB
                                                                • SHA256 72fb1ffff7c472af1fb7b3d20064e43aaed0ba567f373136f5e60043077e1574
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 6KB
                                                                • SHA256 22d68ce0bf72a6d9af4f439444f2c28c5f299140dc28a3d703909f49617027b2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 6KB
                                                                • SHA256 1fef4ec4422a570ac39acbf380f5781667e8090fad88b44127560e8cca5664f1
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw
                                                                • Size 6KB
                                                                • SHA256 168b34f18cd30712ad77afaa9dda723b183c4ebeaac9e9f8063410500462037f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_afa54255-652c-405e-acc5-61bcfd12d517.raw~RFe594ba5.TMP
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_afa54255-652c-405e-acc5-61bcfd12d517.raw~RFe594ba5.TMP
                                                                • Size 429B
                                                                • SHA256 df3b002b24021641b533c91ad7e35c5447f39195b197a468337383dfc38717a8
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                f3f02f57-1216-4690-ab67-ff2f839c332b.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\f3f02f57-1216-4690-ab67-ff2f839c332b.tmp
                                                                • Size 12KB
                                                                • SHA256 aa6944e8fdc382422b6728b1f22c9ce6223848ee1ebc1e479cfd148c7c73f5f3
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 1KB
                                                                • SHA256 cc1ea7d7e4663e9e48196ae35f30a87d9ebf13653109f2418b775d68add756fe
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 505B
                                                                • SHA256 1aa510904804b93085fbe0dd1fabf4d79970e0b969a1c487c06ec0f4fdcadd18
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 1KB
                                                                • SHA256 59019637db1cd148796ee1903db28c744a47b5f148f79366cb297abdfb3958e3
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 1KB
                                                                • SHA256 13c45d8ac27844714a96ab7dae37fa7602354b5c6a134663f49eb75ed5a2ecee
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 690B
                                                                • SHA256 47c7b425cbecd37d027779287dd4b21938e9064b4cb2edf8c37beb222ab95909
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 779B
                                                                • SHA256 d2eea55c7bb6c6f03949b6277d6e535db6957d87127774f8201feea4b27911d0
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 876B
                                                                • SHA256 1dc16fec7eabadded32f951949b6fd8d8f6f82317c63aeec484ebc5b9919fbd9
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 1KB
                                                                • SHA256 845a7f24ffd85d606b0d85e1266e02eeb9b301c9c9de174799581b2c21969f67
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 1KB
                                                                • SHA256 dc66d608554e8b8ab8ca24d537c35af64520082930b0b5a13e1cc2c888a26133
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 3KB
                                                                • SHA256 ea546b7c8fbf88c805dfb983b59c99a5f8470e7c0480b97106e6cb41b44433be
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 3KB
                                                                • SHA256 3a46c2a766c205b275e1db17acf5fc5c0ee9a56cb7fbe28cb75d0ad6695de930
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 3KB
                                                                • SHA256 8f57089ab1dc58795345d26b24bc317088805174e32165b3ebce77e1abb2047b
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 3KB
                                                                • SHA256 5226a1ef862aaaa43fe160d4fb7543b6935a9bb36dc646ba42bd65a64a784475
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 597B
                                                                • SHA256 ceb6760f4e64741352fc9d632aa78bffe5bae84ff137949a047c6f64e686d7d4
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 2KB
                                                                • SHA256 9daeb10333568abf9ab2fa43122ec090a3fd49547f060f61244a4ab0de0b37bc
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 977B
                                                                • SHA256 91a903266657dead3828605037d6b8caf5b2f63285dfc22a719649b162657d28
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 3KB
                                                                • SHA256 ea9e9edb92c55e787ef6252d7a79a6e0025135558d9d0d398407859373c2445b
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 3KB
                                                                • SHA256 8f6c4ece00fd136953aadc2242ba7e1af895b173427a8aac3bb70ac42b48933e
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 3KB
                                                                • SHA256 7e8e665ffb23463a29fb7b989ea0d7b14e540310ad634ea79166cc3b989beeb8
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 3KB
                                                                • SHA256 5f790529641d28407f339879caa52a36326cc81e45198cecce943d65d57185b1
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 1KB
                                                                • SHA256 d8243b56d6748534c2965c9b6f9704075cea277d114ad43fdc29b6c83f33145a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254
                                                                • Size 1KB
                                                                • SHA256 a5204902cf8c782b05444b0790b0c71cb6faefe5476cab892f9a2b158c4cef2a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.0.478428254~RFe59549e.TMP
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.0.478428254~RFe59549e.TMP
                                                                • Size 412B
                                                                • SHA256 562e055cf16b726b4029bb17b1ab765d723757f91c3100a3c29c605a43e56c63
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.1.120624721
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.1.120624721
                                                                • Size 224B
                                                                • SHA256 14eef1094dbda13463d469881f74d5661a45336b314b6680918b2f3b1de6a389
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.1.120624721
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.1.120624721
                                                                • Size 200B
                                                                • SHA256 7136117e44d5252ae69b1ca3a9d16509aeecd58d678c91f1aac375cfc1028137
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.1.120624721
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.1.120624721
                                                                • Size 224B
                                                                • SHA256 ac23e5afaf67d4022aae689e4e68ddf542a9f53a225cac1a321d8619b7e4aefb
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp3292.1.120624721~RFe595828.TMP
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3292.1.120624721~RFe595828.TMP
                                                                • Size 171B
                                                                • SHA256 025b0e0d58f39d35f3957e4dc9b86bdc7389c80f47b8c4b780dcda6d958b3579
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                data_0
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                                                                • Size 8KB
                                                                • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                Submit Download

                                                                data_1
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_1
                                                                • Size 264KB
                                                                • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                Submit Download

                                                                data_2
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
                                                                • Size 8KB
                                                                • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                Submit Download

                                                                data_3
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
                                                                • Size 8KB
                                                                • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                • Size 4KB
                                                                • SHA256 d6bfd9e7224fad56beb26db30346c6746e511b1b627ddd4573f2967600303dd2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Local State~RFe5a59ca.TMP
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State~RFe5a59ca.TMP
                                                                • Size 3KB
                                                                • SHA256 af3d66620404623899bda0e4fde92e50c795a0e85145b1264776e98c1c9d93eb
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                1830197d-ff73-4f14-890d-ac22c43cf858.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\extensions_crx_cache\1830197d-ff73-4f14-890d-ac22c43cf858.tmp
                                                                • Size 13B
                                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                memory/536-1839-0x000001479F200000-0x000001479F25D000-memory.dmp
                                                                Download

                                                                memory/1292-3428-0x000002644F700000-0x000002644F75D000-memory.dmp
                                                                Download

                                                                memory/1428-1838-0x000001EDB0850000-0x000001EDB08AD000-memory.dmp
                                                                Download

                                                                memory/1672-1990-0x00000155CE850000-0x00000155CE8AD000-memory.dmp
                                                                Download

                                                                memory/1768-676-0x000001E501410000-0x000001E50141C000-memory.dmp
                                                                Download

                                                                memory/1768-674-0x000001E57EAE0000-0x000001E57EB3D000-memory.dmp
                                                                Download

                                                                memory/2364-1844-0x0000023263630000-0x000002326368D000-memory.dmp
                                                                Download

                                                                memory/3156-28-0x0000026C08380000-0x0000026C083DD000-memory.dmp
                                                                Download

                                                                memory/3292-1837-0x00000281EA2D0000-0x00000281EA32D000-memory.dmp
                                                                Download

                                                                memory/3964-42-0x0000025B77F20000-0x0000025B77F7D000-memory.dmp
                                                                Download

                                                                memory/4100-1782-0x0000021DF6F60000-0x0000021DF6FBD000-memory.dmp
                                                                Download

                                                                memory/4404-708-0x00007FFFBEAB0000-0x00007FFFBEAB1000-memory.dmp
                                                                Download

                                                                memory/4404-707-0x00007FFFBDBB0000-0x00007FFFBDBB1000-memory.dmp
                                                                Download

                                                                memory/4748-692-0x00000198B88F0000-0x00000198B88FC000-memory.dmp
                                                                Download

                                                                memory/4748-691-0x00000198B6670000-0x00000198B66CD000-memory.dmp
                                                                Download

                                                                memory/4748-27-0x00000198B88F0000-0x00000198B88FC000-memory.dmp
                                                                Download

                                                                memory/4748-26-0x00000198B6670000-0x00000198B66CD000-memory.dmp
                                                                Download

                                                                memory/4768-681-0x0000023D85430000-0x0000023D8548D000-memory.dmp
                                                                Download

                                                                memory/4768-64-0x0000023D85430000-0x0000023D8548D000-memory.dmp
                                                                Download

                                                                memory/4928-1993-0x000001D863970000-0x000001D8639CD000-memory.dmp
                                                                Download

                                                                memory/5052-1845-0x0000015BE7AA0000-0x0000015BE7AFD000-memory.dmp
                                                                Download

                                                                memory/5536-1840-0x000002B721CC0000-0x000002B721D1D000-memory.dmp
                                                                Download

                                                                memory/5592-1841-0x00000261165D0000-0x000002611662D000-memory.dmp
                                                                Download

                                                                memory/5628-65-0x0000018242A40000-0x0000018242A9D000-memory.dmp
                                                                Download

                                                                memory/6120-12-0x0000018578650000-0x00000185786AD000-memory.dmp
                                                                Download

                                                                memory/6216-3420-0x000001DE2F6D0000-0x000001DE2F72D000-memory.dmp
                                                                Download