Overview

overview

8

Static

static

3

OperaGXSetup (3).exe

windows10-ltsc_2021-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    520s
  • max time network
    521s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-es
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-eslocale:es-esos:windows10-ltsc_2021-x64systemwindows
  • submitted
    25/05/2026, 16:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaGXSetup (3).exe
  • Size 3.9MB
  • Sample260525-tr2weaf17v
  • SHA256 4c11c147586b0964b6771c6083f14e1c187ff2060abfb10595011502047f0381
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Checks computer location settings 2 TTPs 23 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 64 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 52 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 22 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 43 IoCs
  • Suspicious use of SetWindowsHookEx 19 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaGXSetup (3).exe
    "C:\Users\Admin\AppData\Local\Temp\OperaGXSetup (3).exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5236
    • C:\Users\Admin\AppData\Local\Temp\7zS47447468\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zS47447468\installer.exe --server-tracking-blob=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
      2⤵
      • Downloads MZ/PE file
      • Executes dropped EXE
      • Enumerates connected drives
      • Enumerates system info in registry
      • Modifies system certificate store
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4960
      • C:\Users\Admin\AppData\Local\Temp\7zS47447468\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS47447468\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.84 --initial-client-data=0x270,0x274,0x278,0x24c,0x27c,0x7ff77e659e98,0x7ff77e659ea4,0x7ff77e659eb0
        3⤵
        • Executes dropped EXE
        PID:5024
      • C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\installer.exe" --version
        3⤵
        • Executes dropped EXE
        PID:2544
      • C:\Users\Admin\AppData\Local\Temp\7zS47447468\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\7zS47447468\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=es --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=4960 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_20260525171832" --session-guid=01a6c338-8a47-4775-9fb2-a1bf14bdad84 --server-tracking-blob=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 --desktopshortcut=1 --wait-for-package --initial-proc-handle=9C08000000000000
        3⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Suspicious use of WriteProcessMemory
        PID:468
        • C:\Users\Admin\AppData\Local\Temp\7zS47447468\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS47447468\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.84 --initial-client-data=0x27c,0x280,0x284,0x24c,0x288,0x7ff77e659e98,0x7ff77e659ea4,0x7ff77e659eb0
          4⤵
          • Executes dropped EXE
          PID:4340
        • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\installer.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\installer.exe" --backend --initial-pid=4960 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=es --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321" --session-guid=01a6c338-8a47-4775-9fb2-a1bf14bdad84 --server-tracking-blob=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 --desktopshortcut=1 --install-subfolder=131.0.5877.84
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Modifies registry class
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:2504
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.84 --initial-client-data=0x280,0x284,0x288,0x258,0x28c,0x7ff60a989e98,0x7ff60a989ea4,0x7ff60a989eb0
            5⤵
            • Executes dropped EXE
            PID:5176
          • C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\assistant\assistant_installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • System Location Discovery: System Language Discovery
            • Enumerates system info in registry
            • Modifies Internet Explorer settings
            • Suspicious use of WriteProcessMemory
            PID:2776
            • C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x651b80,0x651b8c,0x651b98
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:2620
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Suspicious use of WriteProcessMemory
              PID:1580
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x9e1b80,0x9e1b8c,0x9e1b98
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:476
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                • Suspicious use of WriteProcessMemory
                PID:2184
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Suspicious use of WriteProcessMemory
                  PID:3580
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_crashreporter.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.84 --initial-client-data=0x180,0x184,0x17c,0x14c,0x178,0x7ffb6fe5f650,0x7ffb6fe5f660,0x7ffb6fe5f670
                    9⤵
                    • Executes dropped EXE
                    PID:5152
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  • Suspicious use of WriteProcessMemory
                  PID:3044
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_crashreporter.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.84 --initial-client-data=0x184,0x188,0x180,0x150,0x17c,0x7ffb6fe5f650,0x7ffb6fe5f660,0x7ffb6fe5f670
                    9⤵
                    • Executes dropped EXE
                    PID:4884
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0xbf4370,0xbf437c,0xbf4388
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of WriteProcessMemory
                  PID:4816
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:4836
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.84 --initial-client-data=0x190,0x194,0x198,0x18c,0x19c,0x7ffb6fe5f650,0x7ffb6fe5f660,0x7ffb6fe5f670
                      10⤵
                      • Executes dropped EXE
                      PID:4584
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:5540
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.84 --initial-client-data=0x184,0x188,0x180,0x150,0x17c,0x7ffb6fe5f650,0x7ffb6fe5f660,0x7ffb6fe5f670
                      10⤵
                      • Executes dropped EXE
                      PID:3056
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:1104
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.84 --initial-client-data=0x150,0x14c,0x180,0x18c,0x184,0x7ffb6fe5f650,0x7ffb6fe5f660,0x7ffb6fe5f670
                      10⤵
                      • Executes dropped EXE
                      PID:1644
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • Drops file in Windows directory
            • Checks processor information in registry
            • Enumerates system info in registry
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of WriteProcessMemory
            PID:4140
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_crashreporter.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.84 --initial-client-data=0x180,0x184,0x17c,0x14c,0x178,0x7ffb6fe5f650,0x7ffb6fe5f660,0x7ffb6fe5f670
              6⤵
              • Executes dropped EXE
              PID:3868
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1608,i,103990346340538743,4824829656856846329,262144 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1840 /prefetch:2
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:5132
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2084,i,948135406974288575,7227598694806192004,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2096 /prefetch:3
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              • System Time Discovery
              PID:1492
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2292,i,15631097205804737601,2269833493110147592,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2152 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:5936
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2732,i,17782681725132680098,7220122799518568057,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=2776 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:3308
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2756,i,18055762572325048210,8011839016058974981,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=2820 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:3312
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2768,i,9517661911619637116,14680499500549768047,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=2844 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:3132
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2812,i,740030342463547125,17288184560238611907,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=2884 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:4804
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2800,i,14071911580087677675,7953073189081618367,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=2864 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:4728
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2712,i,3894610834691862861,18249644201576304160,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2708 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:3484
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3828,i,1800124717719640550,14721787897235614357,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3804 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:3092
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_gx_splash.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
              6⤵
              • Executes dropped EXE
              PID:4840
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4548,i,12735691937170719359,7489052583189324702,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4564 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:4996
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4740,i,14848632163197713232,6385677502742330176,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4780 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:4880
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4904,i,13095209312393719057,6718016871069328169,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4924 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:4520
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5032,i,9665935284896358492,17545836124252115937,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5064 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:2324
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=es --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5176,i,13899760887880282730,755615072411638290,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5300 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:5836
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=es --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5184,i,12768624110885089885,6907916800125683748,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5304 /prefetch:8
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:2016
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=es --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5188,i,84838006610678734,15443926659196809490,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5312 /prefetch:8
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:6108
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=es --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5192,i,15347816687150900217,6108336037349153899,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5324 /prefetch:8
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:5100
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5772,i,17498259234729504772,10802606978266749429,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5844 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:5148
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=4724,i,372673610751704099,1968292749341885097,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6424 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:4036
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6724,i,16542354620166868959,18228729187402669840,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6676 /prefetch:2
              6⤵
              • Checks computer location settings
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:5908
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6932,i,10072769717770124438,16736839277127253980,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6984 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:3756
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5620,i,472973686779942319,1822913977537208512,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=5640 /prefetch:8
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:6556
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6332,i,13230989442034161467,7653633130530617683,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7160 /prefetch:8
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:6628
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6300,i,535146719929402867,16780679683664783692,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7180 /prefetch:8
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:6636
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6196,i,16992912109968525958,14899299359864868668,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7136 /prefetch:8
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:6656
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6552,i,6738890385303463333,2180301486520413363,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7720 /prefetch:8
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:6700
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7764,i,18242582344036850296,15660920747853775556,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7164 /prefetch:8
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:6708
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7772,i,9144997812835668746,4432597924640259642,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=7808 /prefetch:8
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:6716
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7780,i,10047727069774896173,16676554187683230576,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=7828 /prefetch:8
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:6724
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7788,i,7090769921037623654,16339055873756254031,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=7848 /prefetch:8
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:6732
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7752,i,5807657913127588312,10837183963093360362,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7740 /prefetch:8
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:6764
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8664,i,5857354757927299094,7033211915283288614,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8672 /prefetch:8
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:6820
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6444,i,14276038915812190157,7623278768544836432,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=5272 /prefetch:8
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:6980
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=8968,i,13814281101535460698,15655836266036842697,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9028 /prefetch:2
              6⤵
              • Checks computer location settings
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:6996
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=es --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9152,i,2350973147405313773,10409053330682699452,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9160 /prefetch:8
              6⤵
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:7160
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9164,i,5000154787486968880,1799537534493524153,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=8892 /prefetch:8
              6⤵
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:5764
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9476,i,1727507220522145798,3505751516422007600,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9500 /prefetch:8
              6⤵
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:544
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3828,i,545399935409538255,311128224951580693,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9996 /prefetch:8
              6⤵
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:5368
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10120,i,6239861560734262540,11426568387007120204,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10116 /prefetch:8
              6⤵
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:6168
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=10348,i,14343763208911127820,13748203894681964494,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=9416 /prefetch:1
              6⤵
              • Checks computer location settings
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:3376
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
              6⤵
              • Enumerates system info in registry
              PID:4348
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.84 --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff64b298eb8,0x7ff64b298ec4,0x7ff64b298ed0
                7⤵
                  PID:6248
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\installer.exe" --fix-taskbar-pins
                6⤵
                • Enumerates system info in registry
                PID:6832
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\installer.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.84 --initial-client-data=0x270,0x274,0x278,0x24c,0x27c,0x7ff60a989e98,0x7ff60a989ea4,0x7ff60a989eb0
                  7⤵
                    PID:6324
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10544,i,15545774153079130242,11949478735350678327,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10532 /prefetch:8
                  6⤵
                  • Enumerates system info in registry
                  PID:6940
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10700,i,10980946200449665381,17163387619212228606,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10720 /prefetch:8
                  6⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:6876
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8964,i,4203314876067663578,1033356699511599436,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=9476 /prefetch:8
                  6⤵
                    PID:1396
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6184,i,7889294304986228826,3500390588178409300,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=5472 /prefetch:8
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:5876
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10744,i,9021118351495623608,14506589038437488042,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=10748 /prefetch:8
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:5752
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10624,i,14210270098450975672,16301892291554822443,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=3856 /prefetch:8
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:4752
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=8140,i,11439797970896054562,13940075580812139292,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=8360 /prefetch:2
                    6⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:3256
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10720,i,14108196783545546473,6528131271144799548,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=8960 /prefetch:8
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:404
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9608,i,10634169375383458735,2008750595824433683,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=10236 /prefetch:8
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:6220
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3856,i,2424620006347787558,15873745027573035500,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=8172 /prefetch:8
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:3084
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8156,i,7738102868814839964,17968962967573985080,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=10716 /prefetch:8
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:4728
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10812,i,2521670620863657230,18035840884699036156,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=10752 /prefetch:8
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:6172
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7356,i,7143581070739028980,3740711310237318964,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=10116 /prefetch:8
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:6616
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=5324,i,13256419345364272989,5449180191615005471,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=5340 /prefetch:2
                    6⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:7024
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=9556,i,17183710196507098245,17119086711657318245,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=6704 /prefetch:2
                    6⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:780
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2884,i,7654223877951573592,7214248681657021567,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=10032 /prefetch:8
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:4328
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=10660,i,2259342998863737151,17583873959793856882,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=10676 /prefetch:2
                    6⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:6616
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=9200,i,8440058951092951176,5674991321005673240,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=10452 /prefetch:1
                    6⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:7008
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8136,i,3524144914947758555,16870588479388197652,524288 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=9584 /prefetch:8
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:6156
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=10708,i,13869650689293155526,5852443614260677556,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=8140 /prefetch:2
                    6⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:1484
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=10076,i,13927211503133150123,1550752495365509339,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=10716 /prefetch:2
                    6⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:1264
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6704,i,13242723098756866917,1462455683918871468,262144 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=6956 /prefetch:8
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Suspicious behavior: EnumeratesProcesses
                    PID:5452
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=5564,i,15900998564180606866,7564160406718088525,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=10112 /prefetch:2
                    6⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:2216
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=8168,i,3513243991467353812,18429834616335623111,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=1108 /prefetch:2
                    6⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:6452
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=7468,i,10189183362646735414,13316200594683812690,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=4348 /prefetch:2
                    6⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:4608
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:address-bar-intent=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:domain-suggestions-competitors=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=6784,i,545757030051190236,15533478461516117844,2097152 --field-trial-handle=1844,i,14500572437160110524,2532691393884647094,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1848,i,14137181383339278646,1466071963416579288,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=8360 /prefetch:2
                    6⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:5488
            • C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\assistant\Opera_GX_assistant_131.0.5877.36_Setup.exe_sfx.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\assistant\Opera_GX_assistant_131.0.5877.36_Setup.exe_sfx.exe"
              3⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:620
            • C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\assistant\assistant_installer.exe" --version
              3⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:1600
              • C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.36 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x651b80,0x651b8c,0x651b98
                4⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:4180
        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
          1⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:4384
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_crashreporter.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.84 --initial-client-data=0x180,0x184,0x17c,0x14c,0x178,0x7ffb6fe5f650,0x7ffb6fe5f660,0x7ffb6fe5f670
            2⤵
            • Executes dropped EXE
            PID:2584
        • C:\Windows\system32\wbem\unsecapp.exe
          C:\Windows\system32\wbem\unsecapp.exe -Embedding
          1⤵
            PID:5788
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
            1⤵
              PID:4324
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=131.0.5877.84 --initial-client-data=0x274,0x278,0x27c,0x20c,0x280,0x7ff64b298eb8,0x7ff64b298ec4,0x7ff64b298ed0
                2⤵
                  PID:4772
                • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                  "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
                  2⤵
                    PID:6900

                Network

                      MITRE ATT&CK Enterprise v16

                      Reconnaissance

                      Resource Development

                      Initial Access

                      Execution

                      Persistence

                      Boot or Logon Autostart Execution

                      1
                      T1547

                      Registry Run Keys / Startup Folder

                      1
                      T1547.001

                      Event Triggered Execution

                      1
                      T1546

                      Component Object Model Hijacking

                      1
                      T1546.015

                      Privilege Escalation

                      Boot or Logon Autostart Execution

                      1
                      T1547

                      Registry Run Keys / Startup Folder

                      1
                      T1547.001

                      Event Triggered Execution

                      1
                      T1546

                      Component Object Model Hijacking

                      1
                      T1546.015

                      Defense Evasion

                      Modify Registry

                      3
                      T1112

                      Subvert Trust Controls

                      1
                      T1553

                      Install Root Certificate

                      1
                      T1553.004

                      Credential Access

                      Credentials from Password Stores

                      1
                      T1555

                      Credentials from Web Browsers

                      1
                      T1555.003

                      Unsecured Credentials

                      1
                      T1552

                      Credentials In Files

                      1
                      T1552.001

                      Discovery

                      Peripheral Device Discovery

                      1
                      T1120

                      Query Registry

                      6
                      T1012

                      System Information Discovery

                      5
                      T1082

                      System Location Discovery

                      1
                      T1614

                      System Language Discovery

                      1
                      T1614.001

                      System Network Configuration Discovery

                      1
                      T1016

                      Internet Connection Discovery

                      1
                      T1016.001

                      System Time Discovery

                      1
                      T1124

                      Lateral Movement

                      Collection

                      Data from Local System

                      1
                      T1005

                      Command and Control

                      Exfiltration

                      Impact

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      data_2
                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\data_2
                      • Size 8KB
                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                      • MD5 SHA1 SHA512 SSDEEP
                      Submit Download

                      data_3
                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\data_3
                      • Size 8KB
                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                      • MD5 SHA1 SHA512 SSDEEP
                      Submit Download

                      131.0.5877.84.manifest
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\131.0.5877.84.manifest
                      • Size 225B
                      • SHA256 91404f9482e59289df9c266613c52dbbd309ec303c29d507c4d8c2ebd46b0d4b
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      150x150Logo.scale-100.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\150x150Logo.scale-100.png
                      • Size 2KB
                      • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      150x150Logo.scale-100_contrast-white.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\150x150Logo.scale-100_contrast-white.png
                      • Size 1KB
                      • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      150x150Logo.scale-140.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\150x150Logo.scale-140.png
                      • Size 3KB
                      • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      150x150Logo.scale-140_contrast-white.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\150x150Logo.scale-140_contrast-white.png
                      • Size 2KB
                      • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      150x150Logo.scale-180.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\150x150Logo.scale-180.png
                      • Size 3KB
                      • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      150x150Logo.scale-180_contrast-white.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\150x150Logo.scale-180_contrast-white.png
                      • Size 3KB
                      • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      150x150Logo.scale-80.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\150x150Logo.scale-80.png
                      • Size 1KB
                      • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      150x150Logo.scale-80_contrast-white.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\150x150Logo.scale-80_contrast-white.png
                      • Size 1KB
                      • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      70x70Logo.scale-100.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\70x70Logo.scale-100.png
                      • Size 1KB
                      • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      70x70Logo.scale-100_contrast-white.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\70x70Logo.scale-100_contrast-white.png
                      • Size 1KB
                      • SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      70x70Logo.scale-140.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\70x70Logo.scale-140.png
                      • Size 1KB
                      • SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      70x70Logo.scale-140_contrast-white.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\70x70Logo.scale-140_contrast-white.png
                      • Size 1KB
                      • SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      70x70Logo.scale-180.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\70x70Logo.scale-180.png
                      • Size 2KB
                      • SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      70x70Logo.scale-180_contrast-white.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\70x70Logo.scale-180_contrast-white.png
                      • Size 2KB
                      • SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      70x70Logo.scale-80.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\70x70Logo.scale-80.png
                      • Size 1KB
                      • SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      70x70Logo.scale-80_contrast-white.png
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\Assets\70x70Logo.scale-80_contrast-white.png
                      • Size 901B
                      • SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      CChromaEditorLibrary64.dll
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\CChromaEditorLibrary64.dll
                      • Size 145KB
                      • SHA256 486c6020b042b0119d401bad67e30b15c561226261bfc6ba7fee40c1a23f4e5f
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      CUESDK.x64_2017.dll
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\CUESDK.x64_2017.dll
                      • Size 474KB
                      • SHA256 f55d0b2ebd46b49e6a824c76f951975279a721c85f0301f4c1e5e3d31781fa36
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      assistant_package
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\assistant_package
                      • Size 3.5MB
                      • SHA256 5015df04ab653f790b5ae8aa7946f296d02904685a13a654613779913202d870
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      d3dcompiler_47.dll
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\d3dcompiler_47.dll
                      • Size 4.5MB
                      • SHA256 9f8bbe669f77bfbe44669758e5e91b52da33b243b592078c4578bbd54cce9c1d
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      dxcompiler.dll
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\dxcompiler.dll
                      • Size 24.5MB
                      • SHA256 6349ea792c58d3f29bec3e4788dc95d2746bd6ba944f56035defc99b43cd7e15
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      dxil.dll
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\dxil.dll
                      • Size 1.5MB
                      • SHA256 59599b109351554347e3efb7f0744f5e267403a2fd01edbd01c526f25ab80c4b
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      files_list
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\files_list
                      • Size 4KB
                      • SHA256 027e7faf05f52eba48c4af4ddf57acf2bb98d99004adc270ce88e4b1025fd764
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      headless_command_resources.pak
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\headless_command_resources.pak
                      • Size 2KB
                      • SHA256 19f8d4e066ff126f07cc2b0e5fa9788b5b5b9a6eb790dc8fc0a8899ca7a300f0
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      icudtl.dat
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\icudtl.dat
                      • Size 10.4MB
                      • SHA256 92cbfb1c00ee305e4d085ef609c346795a1c13bf03d48c1a9dfc80d61a1e9ebc
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      installer.exe
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\installer.exe
                      • Size 9.1MB
                      • SHA256 3736f09d2f784b34090c9d0219ea37686b7bc00da56776d3b7ad741610eaaa76
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      installer_helper_64.exe
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\installer_helper_64.exe
                      • Size 638KB
                      • SHA256 a52f922151812fe466566d3cf5e5a48cedcba6d2e2e291204441ff4018452902
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      libEGL.dll
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\libEGL.dll
                      • Size 502KB
                      • SHA256 5e1fa63336a5db84902ba2fc17071a5db049392dcce55ab8c38abf76961b1043
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      libGLESv2.dll
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\libGLESv2.dll
                      • Size 7.5MB
                      • SHA256 6d92f8c7315e8a3d601b506f15298f5fdd5e6421848895b9539ab56772a75166
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      bg.pak
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\localization\bg.pak
                      • Size 1021KB
                      • SHA256 5c8772a5533c87fe15985bff9edc42a018cad16c30694b67ccbe6ed06a8b9415
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      bn.pak
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\localization\bn.pak
                      • Size 1.3MB
                      • SHA256 7194131ac188a7c131ff6eb844f4ddb36dc34158e774c681d42594c380033f7d
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      ca.pak
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\localization\ca.pak
                      • Size 641KB
                      • SHA256 a69212b297940d8f7917315b48befd5d1de0c73d7cc32a185fd1da6d31b24cba
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      cs.pak
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\localization\cs.pak
                      • Size 639KB
                      • SHA256 67bef8ffdcf608a59911f8e119e3c704c88f2baddcc2ddd73727e18cc6c5953a
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      da.pak
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\localization\da.pak
                      • Size 590KB
                      • SHA256 63bf26390d1ff5195de43d13c0e1e7be2575bff22adc8ad8a808178d80aee3ac
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      de.pak
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\localization\de.pak
                      • Size 638KB
                      • SHA256 59456908761f5020c450a367234ff23605c27659f07262154ea8189842a2c13b
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      el.pak
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\localization\el.pak
                      • Size 1.1MB
                      • SHA256 82daed57943497326593c2c634fc6fbfb4b1dc01b4f911d54de81ceedb58aa26
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      en-GB.pak
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\localization\en-GB.pak
                      • Size 517KB
                      • SHA256 84ab2be40958184c9b4060040de527d5724f12849a33ac2690ffc15bbd3080ff
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      en-US.pak
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\localization\en-US.pak
                      • Size 521KB
                      • SHA256 dbf2d6e8a2719406d69892beda4f70dcd1b02ffdcab153e55b436808faa7b7ed
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      es-419.pak
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\localization\es-419.pak
                      • Size 630KB
                      • SHA256 4aa3dbba457d990616d2a71c21e6f2b88a253aa268e94087d0fb6d95763d4794
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      es.pak
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\131.0.5877.84\localization\es.pak
                      • Size 624KB
                      • SHA256 dab0db5baeeaaa785887e30871951d9de59cf7a2334034179100e2712cda44c2
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      installer_prefs.json
                      • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json
                      • Size 1KB
                      • SHA256 0426125081e2e76737bf913f29595627caf9356f73ede810c857cd3e0a10a274
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      Navegador Opera GX.lnk
                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\Navegador Opera GX.lnk
                      • Size 1KB
                      • SHA256 1361bb11085c667948a813787f333ee25f6e8e5d7353dd21114e2d651bb38cc9
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      Opera_GX_assistant_131.0.5877.36_Setup.exe_sfx.exe
                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\assistant\Opera_GX_assistant_131.0.5877.36_Setup.exe_sfx.exe
                      • Size 2.8MB
                      • SHA256 aea99ad410a597e74390c1a4c41fd8b9a0847c555e62538f20690bc4f5081073
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      assistant_installer.exe
                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\assistant\assistant_installer.exe
                      • Size 2.4MB
                      • SHA256 e47c83fe3e201c5d2e39f068a59b75dc4c640bb2d77e330b00f2f7de47c5a264
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      dbgcore.dll
                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\assistant\dbgcore.dll
                      • Size 196KB
                      • SHA256 4a2e6daaac3c2f30d5d50ff17d758c7872149d852eba4fc8249682da49cba611
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      dbghelp.dll
                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\assistant\dbghelp.dll
                      • Size 1.8MB
                      • SHA256 4ffe74dd53a715011655419a9fb741a0699b4fe722768cee8267016fa931140a
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      installer_prefs_include.json
                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\installer_prefs_include.json
                      • Size 348B
                      • SHA256 ff91256961a79f4fcf901dd237e48a31b083e8c28214da7cb1ee3c8e16fea48f
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      installer_prefs_include.json
                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\installer_prefs_include.json
                      • Size 363B
                      • SHA256 f8715e4ed8e43ec3ddbf9be32dd206e731b6cd7b43e3b38cb6989ffcd81ff54b
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      installer_prefs_include.json
                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b7bdc97-f45b-4a16-a711-998d14f48f50 Opera GX Installer Temp\opera_package_202605251718321\installer_prefs_include.json
                      • Size 1KB
                      • SHA256 527ed266b3eaeb9622d8db3b6622fb1f32f3820e5e3402a6ba38ddf47d7d33f3
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      installer.exe
                      • Path C:\Users\Admin\AppData\Local\Temp\7zS47447468\installer.exe
                      • Size 9.1MB
                      • SHA256 69bdbb8a932cde8ec4c47501dad116e0b01870f512685acda4a19c758ff29750
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      819dc434-cdcd-454b-9792-b91c71d8b5b8.tmp
                      • Path C:\Users\Admin\AppData\Local\Temp\819dc434-cdcd-454b-9792-b91c71d8b5b8.tmp
                      • Size 472KB
                      • SHA256 791c81ca1b16b333a947dc63cc0dee14aba5a4f82a7fd5379e42ed40bea8c41e
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      b6b46e98-8695-4276-b00a-51e32f1fbc37.tmp
                      • Path C:\Users\Admin\AppData\Local\Temp\b6b46e98-8695-4276-b00a-51e32f1fbc37.tmp
                      • Size 14KB
                      • SHA256 1063c0cf8fa368edbeb9d05655366387b9b4c5c4e30b6d124ff31ea4517a6b3f
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      bf6ea4e1-2873-4d8c-b7f9-549c92f481d1.tmp
                      • Path C:\Users\Admin\AppData\Local\Temp\bf6ea4e1-2873-4d8c-b7f9-549c92f481d1.tmp
                      • Size 4.1MB
                      • SHA256 40f9e8081dc6cdf8dfbd563f63fbbc3799aea3b14fa13d44f1dc37b7e8293048
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      c5aedbe7-b07b-405b-9203-0a5011860846.tmp
                      • Path C:\Users\Admin\AppData\Local\Temp\c5aedbe7-b07b-405b-9203-0a5011860846.tmp
                      • Size 2.6MB
                      • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      favicon_opera_one.png
                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4140_1019811443\CRX_INSTALL\favicon_opera_one.png
                      • Size 2KB
                      • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      Icon_Light_Neutral.png
                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4140_362815821\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                      • Size 2KB
                      • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      e03ee823a7bc78a0.customDestinations-ms
                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\e03ee823a7bc78a0.customDestinations-ms
                      • Size 22KB
                      • SHA256 e89244f25a7d84daf424c5438bdefc5a84b1eabffc2f5baf4f7ac6141480bb8b
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      e03ee823a7bc78a0.customDestinations-ms
                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\e03ee823a7bc78a0.customDestinations-ms
                      • Size 20KB
                      • SHA256 31256c4ba7cd4c325e158d543b50b7273a4ded079e24c28dc4b7d157831681b4
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      e03ee823a7bc78a0.customDestinations-ms
                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\e03ee823a7bc78a0.customDestinations-ms
                      • Size 20KB
                      • SHA256 79cf8219a54e76e397958414cd2021b4e8041371c7b80658c39d65a0cf5f53a8
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      settings.dat
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                      • Size 40B
                      • SHA256 2b5c7f923d50a2594ac6101ee296e61ed3ef12944ea50ee35c77f6547af60323
                      • MD5 SHA1 SHA512
                      Submit Download

                      Bookmarks
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks
                      • Size 24KB
                      • SHA256 aa75b26a6b3c643c714e71abb596f10a1cdcfc7e8c944fcafe702f0b0238abed
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      Bookmarks~RFe5bc0ad.TMP
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks~RFe5bc0ad.TMP
                      • Size 21KB
                      • SHA256 569ca9cb59de5689d77b26738b459c2b3ead4e65b1519dd88d71603d45bb5b52
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      the-real-index
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                      • Size 48B
                      • SHA256 13b5d3d18ad63032f30ff015e4d87f7ae19c6637921dc4ecd9b6805052b7de18
                      • MD5 SHA1 SHA512
                      Submit Download

                      the-real-index
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                      • Size 2KB
                      • SHA256 adc0ca76e3dec355d3ab4adcb1d2e544d4008f291cea4c2432365a28e1e53859
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      CURRENT
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\CURRENT
                      • Size 16B
                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                      • MD5 SHA1 SHA512
                      Submit Download

                      MANIFEST-000001
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
                      • Size 41B
                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                      • MD5 SHA1 SHA512
                      Submit Download

                      background.js
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.30.0_0\background.js
                      • Size 17KB
                      • SHA256 7c44c782b5e658ceeb46850ec34e316a90d1010d034706f6e5a980f48b8f1398
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      twitch16.png
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.30.0_0\icons\twitch16.png
                      • Size 370B
                      • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      twitch48.png
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.30.0_0\icons\twitch48.png
                      • Size 921B
                      • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      cos-bridge.js
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.4_0\cos-bridge.js
                      • Size 173B
                      • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      cos-content.js
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.4_0\cos-content.js
                      • Size 502B
                      • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      main.js
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.4_0\main.js
                      • Size 47KB
                      • SHA256 6aa809057957dd9c15900268b817b8ca0f87e0254086f80dbc58fa5b824819b4
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      blacklist.js
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.40.0.2_0\blacklist.js
                      • Size 76KB
                      • SHA256 2e92c867e0f9270920173424b5228659a13124b54132496585021f27435e2643
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      common.js
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.40.0.2_0\common.js
                      • Size 1.7MB
                      • SHA256 153aa2e2c8b555c2edeb667819dd6469dff3ba6c74b89e02e686fc7208a9bb6e
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      favicon_opera_one.png
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.40.0.2_0\favicon_opera_one.png
                      • Size 2KB
                      • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      service_worker.js
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.40.0.2_0\service_worker.js
                      • Size 65KB
                      • SHA256 1124b7bb71e5ab4f4a81df623d8e9e1e831e0248fa0dd416dd4c55c04bbe75c5
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      vendors.js
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.40.0.2_0\vendors.js
                      • Size 2.3MB
                      • SHA256 81fd470e0987716ce71e2a22621a3e840eb3a113644ae1d006bdf81d288cfa88
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      webpage_content_reporter.js
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.40.0.2_0\webpage_content_reporter.js
                      • Size 113KB
                      • SHA256 037a9f1fc827596e3065cb719cf21d57c744d9a44feb8afbaab9f2790205c3c6
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      background.js
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                      • Size 86KB
                      • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      Icon_Light_Neutral.png
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                      • Size 2KB
                      • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      popup.js.LICENSE.txt
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                      • Size 1KB
                      • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      rules.json
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                      • Size 839B
                      • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      MANIFEST-000001
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\chrome-extension_jifbgnmbgbdiedhdecealmlgmekpagde_0.indexeddb.leveldb\MANIFEST-000001
                      • Size 23B
                      • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                      • MD5 SHA1 SHA512
                      Submit Download

                      000003.log
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\000003.log
                      • Size 18KB
                      • SHA256 178a588dcaae13404229a6f7f9e4e4621919fa49d4db14925fab5277f0c0120e
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      LOG
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\LOG
                      • Size 365B
                      • SHA256 76b9cc558761a6337598a4c35b46baff60258757b17fb33dc635163e17bba75d
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      29c3ac57-32ae-4a4e-bbe8-2c80623cacc1.tmp
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\29c3ac57-32ae-4a4e-bbe8-2c80623cacc1.tmp
                      • Size 27KB
                      • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      3f6d4604-2da9-4f76-9f80-84b2f0e636ed.tmp
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\3f6d4604-2da9-4f76-9f80-84b2f0e636ed.tmp
                      • Size 27KB
                      • SHA256 f7654bd59a0eca449dce5ce6140898342904778a307f45461436ad5a24ee913e
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      49fa0710-416f-476c-8968-ba051ac93024.tmp
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\49fa0710-416f-476c-8968-ba051ac93024.tmp
                      • Size 27KB
                      • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      5c9e59eb-ac5c-4ae6-a02e-a7de6e07831b.tmp
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\5c9e59eb-ac5c-4ae6-a02e-a7de6e07831b.tmp
                      • Size 27KB
                      • SHA256 39bd99139f46534251ca30ee1eafe846edde8f96356642e04b68a9f2af9799b7
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      5edf2136-4d56-4eae-878f-ff9ff61477e3.tmp
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\5edf2136-4d56-4eae-878f-ff9ff61477e3.tmp
                      • Size 27KB
                      • SHA256 9b19632a65774b14cf35bf7d0b242cba70e8b52bb6667bc6f3d0e8e203048dd6
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      876aec75-423f-4744-8d29-cc014e03f367.tmp
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\876aec75-423f-4744-8d29-cc014e03f367.tmp
                      • Size 27KB
                      • SHA256 c5b282a24d9ef3ca8b9ec9a229d76f55e76c8765f3d55b13ae9d0f6501c7b0fd
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      99a7f137-434b-42f8-b675-adca18cfa00c.tmp
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\99a7f137-434b-42f8-b675-adca18cfa00c.tmp
                      • Size 27KB
                      • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      e09d984c-d393-4f77-9cc7-b298f8698908.tmp
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\e09d984c-d393-4f77-9cc7-b298f8698908.tmp
                      • Size 27KB
                      • SHA256 9715abf483af22f87af9ad4cbf5ce23652e5e1cd911d0a7a21e6c7add2265331
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      Network Persistent State
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                      • Size 5KB
                      • SHA256 e1fe1d6f598f76394970c17bf5fe6d884d554b67471784ba8af2ed2579500e62
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      Network Persistent State~RFe5c892d.TMP
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State~RFe5c892d.TMP
                      • Size 59B
                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      Preferences
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                      • Size 12KB
                      • SHA256 8dfe2f4055b00440cb129e3e0862062962ae547626a6ffa4fd549661e4212c7f
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      Preferences
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                      • Size 12KB
                      • SHA256 0561db48b5cf34a9b3b841464e686fe6fc85e92687d699f52316bc6996e7eb0e
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      Preferences
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                      • Size 13KB
                      • SHA256 74cbf03e56de7148c8d198a5008440897854e0f9b2959eafb6baaf2bad26155d
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      Preferences~RFe5baeea.TMP
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences~RFe5baeea.TMP
                      • Size 12KB
                      • SHA256 fe81e2f704f933c8515aa77b0b8477f9a8424ce4f7067646aefb20ffb7ae06dc
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      Secure Preferences
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                      • Size 209KB
                      • SHA256 dc85c03df7fd312e8f086db46eae91579a38d3537e6e56779af00045d8c6f6be
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      Secure Preferences~RFe5ba9ba.TMP
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences~RFe5ba9ba.TMP
                      • Size 197KB
                      • SHA256 13b13b116fde3de179a792ecce366cb7299f4a53e566176c320b7f94c78913dc
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      the-real-index
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\2b593abf-4bde-40a8-817e-e823a211619f\index-dir\the-real-index
                      • Size 96B
                      • SHA256 5a5b2613ee373e636cb28509868b43ed51bd5a32c2b3d41c52e0ef335a017037
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      the-real-index~RFe5c091f.TMP
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\2b593abf-4bde-40a8-817e-e823a211619f\index-dir\the-real-index~RFe5c091f.TMP
                      • Size 48B
                      • SHA256 458347414be156071f56a335ce092823a443803285f4f2d8ad8056eb0237efc5
                      • MD5 SHA1 SHA512
                      Submit Download

                      index
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\55872520-688f-41be-b758-b35301abf99a\index
                      • Size 24B
                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                      • MD5 SHA1 SHA512
                      Submit Download

                      the-real-index
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\55872520-688f-41be-b758-b35301abf99a\index-dir\the-real-index
                      • Size 144B
                      • SHA256 c1766eec243265af645c4bb46250973bfd60e0ceb4cafe2424a40eacda7713cd
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      the-real-index~RFe5c08d1.TMP
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\55872520-688f-41be-b758-b35301abf99a\index-dir\the-real-index~RFe5c08d1.TMP
                      • Size 48B
                      • SHA256 1bdd1cf6951273eb8b592526d206c4d23d6dcd84bc86dea583cc2df7d3f7c1f6
                      • MD5 SHA1 SHA512
                      Submit Download

                      index.txt
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
                      • Size 208B
                      • SHA256 1c6899756c29469148f542d3241b95aa61a6c1ab168f013c33c1ba636bd65e50
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      index.txt
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
                      • Size 203B
                      • SHA256 2bdb4541ec1efd6dd2ec555a1ff5416aab3322daec27a7df74235227810c27ae
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      index.txt~RFe5bbae0.TMP
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt~RFe5bbae0.TMP
                      • Size 141B
                      • SHA256 457f3fb038fc43eb8aa0cb41f15b69eed63aec5aea6eeb61797525333e40c0c2
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      67a473248953641b_0
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\67a473248953641b_0
                      • Size 48KB
                      • SHA256 2024f99c41670ac62454b0b58013cc5ff438df54cb7f2da43081049eef90ca19
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      67a473248953641b_1
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\67a473248953641b_1
                      • Size 114KB
                      • SHA256 7859c869cc05f1ced9f616f4b0b81214a8274ef10f53e4138963d7ca88c14d0b
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      the-real-index
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                      • Size 456B
                      • SHA256 fc4a1f709a673e0f87cb77518896b9039abe081873359c91b3a2326891303ae8
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      the-real-index~RFe5bdbb6.TMP
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5bdbb6.TMP
                      • Size 72B
                      • SHA256 089ce0549c3cc5f0ff1449650ebd7da351eb02dec346d000773cb6e6d7bbd0d1
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 12KB
                      • SHA256 d62fe97a48361623d2b9ec305915e47c8c3dc863e38502fe3a7c267ca5dd9a51
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 12KB
                      • SHA256 ed5be19652bc0013852086d3e1bd13775dbe9986c242b29f8b9402d69c5cb096
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 c300de63e7ce88ff9ae082b1568a518eaa160bc8b26bda33f315451004782437
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 541B
                      • SHA256 af1a965ce446492373909fdec6d6a905944d5a90b66eb5d713e284a82bd77e9b
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 653B
                      • SHA256 4d9ad2e35d8bc9d99ec10c10ab2cdaf259e79cd5ce7abe1af9e77580baa4e0c0
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 781B
                      • SHA256 ff2be90dd940921fbdd16dd3990f6cd517b3125e6fdfa663007301c0afdcec30
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 10KB
                      • SHA256 d45a3665c9a4d0fd869535c38e7db9f61c0c7eecb8bac38e3d19493df59e4629
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 10KB
                      • SHA256 13856a972a8e3c5837f822fd875ad40f7059ee56870d60f49495c3dd2d4cb23e
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 11KB
                      • SHA256 b1114b712c931b35fa29d6db9927ca832ff07deaa33cc90a48b092589d26faa1
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 11KB
                      • SHA256 5a861cf2adc11e0a985e39d24e05a1e1e97b75a8cce982b1831a7416f0a28373
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 11KB
                      • SHA256 45a64cf63d1b73f2324f9551b112c687cbc2b69e62e631ff2d553ac526b69672
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 12KB
                      • SHA256 3262ea16fe2ffb330c05b7577cd266c5ec29a456c6f667eebbba86112febc095
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 12KB
                      • SHA256 c8ca8314c5125f5f22272992dc6d2a325c49284b18e1363eab4acaeeb1b7130d
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 12KB
                      • SHA256 37659e9040683150093a134bbeb52cc20e81e4c0dc145cc19d36a2c3cf173d03
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 9KB
                      • SHA256 583dac9f5a32eba8aaf105e100fd2d4f32496b33e6c534b78f5a098daebfac90
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 957B
                      • SHA256 d06810f41158fb6b259a4d8014d4955f2dec4009aba815fdfb6e7c7847c04f43
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 1KB
                      • SHA256 0c743896a54c6083b05725bf3ae9d8109cdcfcf29d3da55f8769c33a5d977386
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 1KB
                      • SHA256 4555c1b437b2b8350a2451243b27c42eab375fac5b060af6b0d10e0f5f378ea4
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 1KB
                      • SHA256 92bbac81fa95bbe7b29196cf3f2a904af493ac3f33b58b83b21ec99916a99c2f
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 1KB
                      • SHA256 bb064f68e0dc1fcbae3cbf56993aa15a89c15d2f8118b28cc470dbfd150eb21a
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 1KB
                      • SHA256 ca2133f48ab2d9d65451c2ac9121cfe1dd9e78724f89e643631126aba9b415cc
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 1KB
                      • SHA256 b1ff737a6c80cf227f8c69f2606a046c888e95b3419cbced2a04c906885157ff
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 1KB
                      • SHA256 18621ff58ed077a5533f5cec8b20afc3706e7f082a340e861a4833633f6a8aaf
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 1KB
                      • SHA256 0dbda6be98eb2a1ccc200d90b8e12f57a21ab8125608926400059f57053fc19f
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 2KB
                      • SHA256 4fb5c313818bac1c6ca59c2eee48ef96f136be3d1c7dd9a6f15229d98af385af
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 2KB
                      • SHA256 a0d305b8ad328518f69372d791742c2d4fe9ec893e59c500a8ad6ffecd555c16
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 2KB
                      • SHA256 9725388d63e848baa022d26c79274a09848b71efb57d57cc3a20fa7413c40b37
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 2KB
                      • SHA256 1920cbd1065c58e3d2b0b5393630ae0fcddf98ce41759b24c9eb200380053284
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 2KB
                      • SHA256 fa4f8e44313be47ea566aa989432782fbcb646bb65a5a9986e06e8625c9e9510
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 2KB
                      • SHA256 fa24b67e3346cad8d834be79b928c384829c5d6f7ce4d64e43b36c9fc3683c9a
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 2KB
                      • SHA256 e7dfec0cf8257aecc7a56782181c8a0d4bdfc6558730b9d1cdb1c63e69b413e5
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 3KB
                      • SHA256 158ec28d6cfb4c51337e390bef3eb4540a560ada2b8e115db4068ceb251ebda4
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 3KB
                      • SHA256 d7172bfbed6b718adb2f0d7da5519d89a693fa8c4eb3a1c457ffd06a33689417
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 3KB
                      • SHA256 8459af88ffe20086f8ba91e86f74566650b4e96e306a54eebf0a427a27ec751a
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 3KB
                      • SHA256 80ca4ecffa1f2545cdaee6b6615aeaf8cb20c43e5659861668ecbdc01bedd2f3
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 3KB
                      • SHA256 c8faba700fd5235b76f25d5f65cf8380624a5f033e6ad82602622dd84bb45f55
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 3KB
                      • SHA256 b777a97e0b6c4f7c342262c2cbc0e0a0f93dd6b46efe4bd9f19f5baf1be1d991
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 3KB
                      • SHA256 66997cb2fc0b81109918e8f156229501c87cadd28fddd253e11f18a1ded64475
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 3KB
                      • SHA256 eee0adfaf19db4b8b0ff6501da31f94f0d8588c8e4bdda7c6a22084d22ff903f
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 3KB
                      • SHA256 b9fec6829b35795fa68c45fc74f701c11bbeecca45a1e22c096d1a15bfe8543a
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 11KB
                      • SHA256 7a55b8a9b868e56f03d91eac2d33b793e30e5ae444ab9bd675eb07c3237654b1
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 11KB
                      • SHA256 26f05c3cc89fe6f6a4464387f9f0481fe9147dd1f58663ac19dde04b35f593ad
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 80a5a71c98df9fa97c8aec4f9dba065cf02bf6719109c9e6885734a351c34705
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 59e57d12e285ede61ea84c18adc61b2f856f220d902bb4d8f78e283c43efeca3
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 95f8a36007349f19e88912cdf60f5821467e92377da0c58c327f3bfad150efa4
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 9a5f4b8d222819ea0c617132655dc5d17ff4a83d40146a8d455b5a213fe45c07
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 882eeb3bb47ccbf2312c246ae7224025d15ffecce46f22575ba90fd36cef4438
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 84f09bd378403d57738c039366b86ace6444bc38ad8ddb528b2a141045642734
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 72b794efcd9d6d00ad17ee3b77f34e8c156d9ea51202e43695924084c376f948
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 55925a1fbf2cbf6c830f2ac00672d0f2f8b264673524bfb8c89d0e008f7a8565
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 ea0bb6efece6cedd22cd2180ae11246228c176339d3c6106cdad145e7bda07e6
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 f36c97ff067f86a7fbc2a595d6d508ce735b0c3c57b36791dd9e276e5f20e5dc
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 7db315c0c8dd0f312b3fcf19ed991648b4c80190e8a77103163a77f225a10341
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 20e4d258792af3f4f187966157f0e10e861ac706cd3e40b89102c6eeecab0b18
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 9a3a0977dfbee16bcb208ac46abd21a0ca92bdf6f7df1f7e2009dec1cfacb314
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 a806bf36a3854e74c9ef5c6efd7558269ade2ef986781f83c4fa1d00675f9e86
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 f2396cf31772b64a374fb2c6a63729f21147e393b5269fcc54233ea2a4308f0e
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 10KB
                      • SHA256 625491076c6df3aedfedeb442c34e60fe9693581ac5f955880c07f01ea2626ac
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 9KB
                      • SHA256 65c7a2138734ed05967192288efaa46fafd2bc23f41f1b5204e995f61e5d6b38
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 10KB
                      • SHA256 6abd13cc814069fafaa3eb52b91bd95e9d6cb92e98c0a16b22595f1f709525a9
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 11KB
                      • SHA256 be8e67e881a87a4771a7e3b48813ca74cec4459deb92c39fe2e6c344dc4e1a60
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 6314a5a93bc44f7b06f8642c2262e06b9ccb5a99a17b0a551332368e998fa9d2
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 11KB
                      • SHA256 9dc7b8212e04a4a88ef5426585ad3999db18c527609c4fee7115cc2df110534e
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 11KB
                      • SHA256 c7e7fbb4d850477797a05e31afbb9a28ac50c0242ba04aa5e0582168e6ae8e06
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 12KB
                      • SHA256 bded46b21b1d6846bbe3ad86a960589860d6511fff7976c2379b7566417725ad
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 12KB
                      • SHA256 f269aa004b27f9885e423115d1cd4f83ead16953140d50ff08a38804789323bb
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 9KB
                      • SHA256 562acd75fa2f1b42cd0c4cc742ffe53d00a3ce26738467d166490a5a1f73d5f5
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 9KB
                      • SHA256 ac347d3f84904e14f4709245a0f226baebfa61c33eba1eb56d7a9d3b8ff5a7c8
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 9KB
                      • SHA256 a20bf1bf98543b46f654aedaf099cc18ba328bef25a8aa2dcc342e292f2f62fa
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 9KB
                      • SHA256 641fedd95e1bf4e2ec6ee6852cd7e6a86c1ddba54f7d7d30f02fb416cc611b9a
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 9KB
                      • SHA256 495eaa578939a6f6d8736dca4749c6de56b3564a39209e1bc4d390e40278cbeb
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 12KB
                      • SHA256 17fb517742bab9a2ed6052032a55b5919f3651bae7edec68b9f26e6f77ccfb9a
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 14KB
                      • SHA256 9ab8eaaf97da44c7dd3b878d4f914e3954efba9c9aa63d355cd4b74b26ae8fd8
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 12KB
                      • SHA256 3982b36bc90a16fe4cc21ec22ef1d31f01d3126b3c0cdb48561a15901e2462dc
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 c43b7b18e92f0d64d56d248e6558f4ef3d8b92b0b045e5926b3c333bec66a1d4
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 dcd5abcc3ef267d9c48f07a756f2ab9d249e5e8110feadac5eda245e80230fbd
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 96de0eb0d876176e02128461157b96a3a3f49e67cc6ea0fe077410b3d33b3c9e
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw
                      • Size 13KB
                      • SHA256 05c82ad093de70e9b64df6ae555ea61ae606db295f522380d1b8be9570422cc8
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      session_c2f99614-4610-481a-9e86-acebb000f97b.raw~RFe5b6202.TMP
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_c2f99614-4610-481a-9e86-acebb000f97b.raw~RFe5b6202.TMP
                      • Size 429B
                      • SHA256 ab9c295db6337c639494a1d60e5e7776422ecec22934afa2220c156702fad625
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      c09a9d57-56a6-4c5a-b50b-59ce60acad98.tmp
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\c09a9d57-56a6-4c5a-b50b-59ce60acad98.tmp
                      • Size 514KB
                      • SHA256 0ed46dedc105ad49609a1c38bbcf45258c49011f8f6efbc46891f2db8160ba8d
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      f84459f7-1400-4b5e-88cc-b40a2824d414.tmp
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\f84459f7-1400-4b5e-88cc-b40a2824d414.tmp
                      • Size 162KB
                      • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      ssdfp4140.0.322706036
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.0.322706036
                      • Size 418B
                      • SHA256 14725480cb9b26459628265476efada3a9a97cf954fe5845324abcc5ce6a3da8
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.0.322706036
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.0.322706036
                      • Size 2KB
                      • SHA256 c013f38ce97b7cd1103caa29d9d6d06b8340a93e2a7f613c8fb70786a4654016
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.0.322706036
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.0.322706036
                      • Size 516B
                      • SHA256 e5ee6cd8eace26e69b6b2774cd0a4f33efb2db7dfd5b0cbc5c3dfe5da24d4c6d
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.0.322706036
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.0.322706036
                      • Size 578B
                      • SHA256 acf10d6f23ad6d802b325a5472766bdcdf67581468d0b8b5e62eb1a2e747445b
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.0.322706036
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.0.322706036
                      • Size 1KB
                      • SHA256 429d014edab6eee50dec5ba9206b1bc4ee4076ab75573075e16eb8bd90473a67
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.0.322706036
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.0.322706036
                      • Size 2KB
                      • SHA256 0b659f6bd3fbcf207f24c1b5555d3fd8b4fb33be11d84a6ee02e3f5cd590f429
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.0.322706036
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.0.322706036
                      • Size 2KB
                      • SHA256 b3c4967be85670bc52a9ce985e8d0318fc29b6ba2aba8552706ce0f9a80a3802
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.0.322706036
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.0.322706036
                      • Size 2KB
                      • SHA256 7092121854eb8e510f27ed78db3f19b0c3e7cf2cd3eb6a417ddb5b11eec79a14
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.0.322706036
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.0.322706036
                      • Size 2KB
                      • SHA256 494b6b327e9139cf970d45cdc74158254238ae37a041139cf73ffd825e219a43
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.0.322706036
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.0.322706036
                      • Size 2KB
                      • SHA256 189e3171be530b53df4d68948461da75586cbed3de6c4362f350bcc76db00ba5
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.0.322706036
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.0.322706036
                      • Size 3KB
                      • SHA256 2737c2b51eb99fe48c4ac14c2f798aabff3e291e88e605141768e0d029540f55
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.0.322706036
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.0.322706036
                      • Size 2KB
                      • SHA256 f66be9d663f166ab23a2c7c3d4893d895b5d52dfd7496c59f6ee20bd480b2d57
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.0.322706036~RFe5b6d9b.TMP
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.0.322706036~RFe5b6d9b.TMP
                      • Size 357B
                      • SHA256 abb9641e1c34fef1bdb7a1a25811c65a65fe6a0e0f2d5ba31a35f0e4a5d31f45
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.1.1925824686
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.1.1925824686
                      • Size 224B
                      • SHA256 9f7cd861682d50dc3b5ab8a37219492540be43f3ef37abdbab02ece148757529
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.1.1925824686
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.1.1925824686
                      • Size 200B
                      • SHA256 d2fe2a39c278edc72f1066ca8690d6e6e9e0a35fd4b1b206c92c0f699108b949
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.1.1925824686
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.1.1925824686
                      • Size 703B
                      • SHA256 1cc60cf9a2b26bd144c215c5370f5ff3cd5373b3f4db1235b749bad834c000fb
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.1.1925824686
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.1.1925824686
                      • Size 796B
                      • SHA256 7e2b9ad8c44affb1d84398515cc17274a35485b4c8eb2535b9ae5de9829d816f
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.1.1925824686
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.1.1925824686
                      • Size 885B
                      • SHA256 5acba635a29049010d3ea6b1218f528ef58602387d84dd098c0010285bf8ae20
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.1.1925824686
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.1.1925824686
                      • Size 978B
                      • SHA256 9b58ad820bc64ff341a5902e15c1123c7e4e6b8843ca586c42bf26e464e07ceb
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.1.1925824686
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.1.1925824686
                      • Size 611B
                      • SHA256 3c1b7a5ad0e1fa4c3b5bb2faa0c6643e48e4f86bf924f4ee0c5af6fe7a75fac2
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.1.1925824686
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.1.1925824686
                      • Size 1KB
                      • SHA256 f1d6207b809560f9944562e1050521f13da9bc3f0046db1c6ae174a300ae68fc
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.1.1925824686
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.1.1925824686
                      • Size 1KB
                      • SHA256 c065f84f6831ece1d61438e06d20467cbb5a71d1fa574f9c9148c6a5db1e30a9
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.1.1925824686
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.1.1925824686
                      • Size 1KB
                      • SHA256 6ea589928237c12901974a5bbbe217f10adc78be8ddb5dec371d1c5fbf416e7c
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.1.1925824686
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.1.1925824686
                      • Size 518B
                      • SHA256 0cbcce527b88dbe0cd703735aa2f0475b05d7b82683dae9afeb0f3f1bfa36ee7
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.1.1925824686
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.1.1925824686
                      • Size 1KB
                      • SHA256 a78b65bbd0d7331b84308d1179fad098235c497a3504909cf62e07316ce280d6
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.1.1925824686
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.1.1925824686
                      • Size 1KB
                      • SHA256 9f060e85dcf6ac1a46fdb8d90687c2b2ff85e7c166514ef2ef7fc1d220f25605
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      ssdfp4140.1.1925824686~RFe5b6f60.TMP
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4140.1.1925824686~RFe5b6f60.TMP
                      • Size 171B
                      • SHA256 428cd41f928bf72d2ab8cc20d856128dd726b09aa44a3da22927fca858f9dd31
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      data_0
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                      • Size 8KB
                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                      • MD5 SHA1 SHA512 SSDEEP
                      Submit Download

                      data_1
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_1
                      • Size 264KB
                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                      • MD5 SHA1 SHA512 SSDEEP
                      Submit Download

                      Local State
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                      • Size 4KB
                      • SHA256 ebacd300049fe94c5ff58040e736fc1d5657f352db19ac62fc89575f70399677
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      assistant_prefs.json
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json
                      • Size 151B
                      • SHA256 25f2aee1ab07a2616a434e2abf689e660a6ef6bfcf1970bac898d035f63a56b1
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      assistant_prefs.json~RFe601409.TMP
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json~RFe601409.TMP
                      • Size 151B
                      • SHA256 97ed9711bb40df8874aebb6e0471983ee4aaedb3463de1174e14f67eae558641
                      • MD5 SHA1 SHA512 TLSH
                      Submit Download

                      es-ES-3-0.bdic
                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\dictionaries\es-ES-3-0.bdic
                      • Size 766KB
                      • SHA256 e6334dcf080aaeca679db70565762a2c296ff5780c1af263530ac7345736bfa9
                      • MD5 SHA1 SHA512 SSDEEP TLSH
                      Submit Download

                      memory/3312-395-0x00007FFB8DB50000-0x00007FFB8DB51000-memory.dmp
                      Download

                      memory/3312-394-0x00007FFB8CFB0000-0x00007FFB8CFB1000-memory.dmp
                      Download

                      memory/5452-2991-0x0000026041E10000-0x0000026041E11000-memory.dmp
                      Download

                      memory/5452-2987-0x0000026041E10000-0x0000026041E11000-memory.dmp
                      Download

                      memory/5452-2993-0x0000026041E10000-0x0000026041E11000-memory.dmp
                      Download

                      memory/5452-2986-0x0000026041E10000-0x0000026041E11000-memory.dmp
                      Download

                      memory/5452-2995-0x0000026041E10000-0x0000026041E11000-memory.dmp
                      Download

                      memory/5452-2985-0x0000026041E10000-0x0000026041E11000-memory.dmp
                      Download

                      memory/5452-2992-0x0000026041E10000-0x0000026041E11000-memory.dmp
                      Download

                      memory/5452-2994-0x0000026041E10000-0x0000026041E11000-memory.dmp
                      Download

                      memory/5452-2997-0x0000026041E10000-0x0000026041E11000-memory.dmp
                      Download

                      memory/5452-2996-0x0000026041E10000-0x0000026041E11000-memory.dmp
                      Download