Analysis

  • user interaction
    yes
  • max time kernel
    25s
  • max time network
    31s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    23/06/2026, 03:28

General

  • Target
    OperaGXSetup.exe
  • Size 3.9MB
  • Sample260623-d1m6lsav3x
  • SHA256 63af216c0b4db37cefdba79a12a1a74b14721fcaa13f5d3becb262931c90941f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 10 IoCs
  • Loads dropped DLL 4 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 21 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 8 IoCs
  • Modifies registry class 45 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 10 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5132
    • C:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exe --server-tracking-blob=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
      2⤵
      • Executes dropped EXE
      • Enumerates connected drives
      • Enumerates system info in registry
      • Modifies system certificate store
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4560
      • C:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.82 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff711e77e08,0x7ff711e77e14,0x7ff711e77e20
        3⤵
        • Executes dropped EXE
        PID:3684
      • C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\installer.exe" --version
        3⤵
        • Executes dropped EXE
        PID:3912
      • C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:1472
      • C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe" --version
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:1940
        • C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x5b4b80,0x5b4b8c,0x5b4b98
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:4608
      • C:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=4560 --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461" --session-guid=84a6a5ac-7faa-4c51-82c5-6442b88d5714 --server-tracking-blob="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 " --desktopshortcut=1 --wait-for-package --initial-proc-handle=DC0A000000000000
        3⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:4784
        • C:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.82 --initial-client-data=0x280,0x284,0x294,0x25c,0x298,0x7ff711e77e08,0x7ff711e77e14,0x7ff711e77e20
          4⤵
          • Executes dropped EXE
          PID:2404
        • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe" --backend --initial-pid=4560 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461" --session-guid=84a6a5ac-7faa-4c51-82c5-6442b88d5714 --server-tracking-blob="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 " --desktopshortcut=1 --install-subfolder=132.0.5905.43
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Modifies registry class
          • Suspicious use of WriteProcessMemory
          PID:5836
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x290,0x294,0x298,0x268,0x29c,0x7ff67a717e08,0x7ff67a717e14,0x7ff67a717e20
            5⤵
            • Executes dropped EXE
            PID:5528
          • C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
            5⤵
              PID:2144
              • C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x5b4b80,0x5b4b8c,0x5b4b98
                6⤵
                  PID:5004
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                  6⤵
                    PID:776
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0xcb4b80,0xcb4b8c,0xcb4b98
                      7⤵
                        PID:2664
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                        7⤵
                          PID:5860
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                            8⤵
                              PID:4160
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffaabe74ff0,0x7ffaabe75000,0x7ffaabe75010
                                9⤵
                                  PID:4788
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                8⤵
                                  PID:4852
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0xd4,0x14c,0x150,0x9c,0x154,0x7ffaabe74ff0,0x7ffaabe75000,0x7ffaabe75010
                                    9⤵
                                      PID:5588
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x27c,0x280,0x284,0x244,0x288,0x10a8378,0x10a8384,0x10a8390
                                    8⤵
                                      PID:492
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                        9⤵
                                          PID:3488
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffaabe74ff0,0x7ffaabe75000,0x7ffaabe75010
                                            10⤵
                                              PID:5896
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                            9⤵
                                              PID:5608
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffaabe74ff0,0x7ffaabe75000,0x7ffaabe75010
                                                10⤵
                                                  PID:4448
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                9⤵
                                                  PID:5124
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffaabe74ff0,0x7ffaabe75000,0x7ffaabe75010
                                                    10⤵
                                                      PID:6072
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                                            5⤵
                                              PID:5696
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffaabe74ff0,0x7ffaabe75000,0x7ffaabe75010
                                                6⤵
                                                  PID:4924
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1640,i,8993627367232673981,11543657407782905932,262144 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1792 /prefetch:2
                                                  6⤵
                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                  PID:4460
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2064,i,2655348859636063053,4467379446410923099,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2076 /prefetch:11
                                                  6⤵
                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                  • System Time Discovery
                                                  PID:3240
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2212,i,297080557749798858,16659305916527387961,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2292 /prefetch:13
                                                  6⤵
                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                  PID:3164
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3128,i,15373258652558217215,4237597177144582369,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3248 /prefetch:14
                                                  6⤵
                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                  PID:3640
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3136,i,8595241319898072126,11410858272136721491,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3276 /prefetch:14
                                                  6⤵
                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                  PID:6056
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3156,i,15106088675388162070,8675559594650180861,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3280 /prefetch:14
                                                  6⤵
                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                  PID:3812
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3168,i,8524487683043301892,5793057734730027703,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3268 /prefetch:14
                                                  6⤵
                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                  PID:1048
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3188,i,18034038163551000452,11913295473106825169,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3332 /prefetch:14
                                                  6⤵
                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                  PID:4880
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3204,i,5966198471521200027,17582180273260542956,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3352 /prefetch:14
                                                  6⤵
                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                  PID:3616
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3492,i,5106335504217840116,4244966354046913208,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4008 /prefetch:1
                                                  6⤵
                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                  PID:2532
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_gx_splash.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                                                  6⤵
                                                    PID:5364
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4576,i,12916548107871398427,6427874188774069070,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4580 /prefetch:1
                                                    6⤵
                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                    PID:5268
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4792,i,17499636025004455708,15942871234988600403,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4836 /prefetch:9
                                                    6⤵
                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                    PID:5404
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4964,i,10570030341720201932,1649952452170422821,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4972 /prefetch:1
                                                    6⤵
                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                    PID:5476
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5096,i,4091301863062053847,14831237959719990839,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5216 /prefetch:1
                                                    6⤵
                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                    PID:5448
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5332,i,16297072617421905146,6232753859933839675,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5352 /prefetch:14
                                                    6⤵
                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                    PID:5416
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5288,i,1875724078422381166,7279228930996320797,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5356 /prefetch:14
                                                    6⤵
                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                    PID:5428
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5340,i,6816492601045803028,10099154739537298084,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5364 /prefetch:14
                                                    6⤵
                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                    PID:5400
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5344,i,11554875365595526701,12415383233471934370,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5336 /prefetch:14
                                                    6⤵
                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                    PID:5456
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6124,i,5220145943216656677,17887154199533448128,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6372 /prefetch:9
                                                    6⤵
                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                    PID:5676
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6612,i,11627629176435846554,17189352608913295123,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6688 /prefetch:9
                                                    6⤵
                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                    PID:1820
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6904,i,3636689601819575003,13317825880403402241,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6940 /prefetch:9
                                                    6⤵
                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                    PID:992

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              132.0.5905.43.manifest

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\132.0.5905.43.manifest
                                              • Size 225B
                                              • SHA256 0eb93f246ca9ae50ab6056af4cc5746fe244ec4ccdb38175b2eb2e80286a27c7
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-100.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-100.png
                                              • Size 2KB
                                              • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-100_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-100_contrast-white.png
                                              • Size 1KB
                                              • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-140.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-140.png
                                              • Size 3KB
                                              • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-140_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-140_contrast-white.png
                                              • Size 2KB
                                              • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-180.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-180.png
                                              • Size 3KB
                                              • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-180_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-180_contrast-white.png
                                              • Size 3KB
                                              • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-80.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-80.png
                                              • Size 1KB
                                              • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-80_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-80_contrast-white.png
                                              • Size 1KB
                                              • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-100.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-100.png
                                              • Size 1KB
                                              • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-100_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-100_contrast-white.png
                                              • Size 1KB
                                              • SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-140.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-140.png
                                              • Size 1KB
                                              • SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-140_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-140_contrast-white.png
                                              • Size 1KB
                                              • SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-180.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-180.png
                                              • Size 2KB
                                              • SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-180_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-180_contrast-white.png
                                              • Size 2KB
                                              • SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-80.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-80.png
                                              • Size 1KB
                                              • SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-80_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-80_contrast-white.png
                                              • Size 901B
                                              • SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
                                              • MD5 SHA1 SHA512 TLSH

                                              CChromaEditorLibrary64.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\CChromaEditorLibrary64.dll
                                              • Size 145KB
                                              • SHA256 d092a6ac9e3b41c80e6d8eb09cce8efeb22e142bba4551c5c680273de0e4341a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              CUESDK.x64_2017.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\CUESDK.x64_2017.dll
                                              • Size 474KB
                                              • SHA256 7c46fd5e0338361ad3528f3dec72dcb4a9ae20d386fcb1cc214a801737108b3a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              assistant_package

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\assistant_package
                                              • Size 3.6MB
                                              • SHA256 6cb3ed0b791b2319305c23a43353a5db2081b4013289162d54ceade5b2b7e203
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              d3dcompiler_47.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\d3dcompiler_47.dll
                                              • Size 4.5MB
                                              • SHA256 31b57aa72c8773469132d587b5de1ce6c1d672e7a1c02b51bc7be114f17af437
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              dxcompiler.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\dxcompiler.dll
                                              • Size 24.5MB
                                              • SHA256 47c488edf53904b9bf7fca8907a6b6940557f3ea01127845abcd9e518cefb13f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              dxil.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\dxil.dll
                                              • Size 1.5MB
                                              • SHA256 e86e64046a4ed5050b16defac296e4ef4abd936f7cdceb47aa2fe498867fa761
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              files_list

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\files_list
                                              • Size 4KB
                                              • SHA256 ee7e23266f512e69b95afa630f4539d894290ba35a026e93aba0425c390b0219
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              headless_command_resources.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\headless_command_resources.pak
                                              • Size 2KB
                                              • SHA256 b3175eb086ccedcddd282b5847a23687a8a8ee37bf485851efc36a7600a2acfe
                                              • MD5 SHA1 SHA512 TLSH

                                              icudtl.dat

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\icudtl.dat
                                              • Size 10.4MB
                                              • SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              installer.exe

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe
                                              • Size 9.1MB
                                              • SHA256 9614c38d5fea1c81e2f421f27c1d427ba7083085a2eb9ab17e3285e8bb0dde8a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              installer_helper_64.exe

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer_helper_64.exe
                                              • Size 649KB
                                              • SHA256 80d6bff0207e8fe5560c6277ae4c67e6b12656363fdcde82ae030ff9c40d949c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              libEGL.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\libEGL.dll
                                              • Size 501KB
                                              • SHA256 01b100af6f95eb34dc190a4d854ced381cc23eebc316e9195ad9baeaddaeb51f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              libGLESv2.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\libGLESv2.dll
                                              • Size 7.5MB
                                              • SHA256 d3117fd2d0e0279eb62807a7212d0f9db6b58b159b223eba8c6578a846563fd3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              bg.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\bg.pak
                                              • Size 1.0MB
                                              • SHA256 2cd44de4f707f0cbaa460446b71f178c09677f54b58e36de3245928f53e5334b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              bn.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\bn.pak
                                              • Size 1.3MB
                                              • SHA256 9316bebdfb4de3d7bd922f4cecf6cb14a180a5de0e1cee9aa6d826cad929d06e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              ca.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\ca.pak
                                              • Size 644KB
                                              • SHA256 4f2282548621f11973e493642c114323e658c5d68d8e9eca139bd84e8dc28544
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              cs.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\cs.pak
                                              • Size 642KB
                                              • SHA256 079aeb18c44c58677f657f4b3b6b89550f3296bd46f37728acf9179015354c26
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              da.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\da.pak
                                              • Size 593KB
                                              • SHA256 a627fc78602dfef085badd85a6d3e78dfc889719e99b98787fdfe6f6ddf358c3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              de.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\de.pak
                                              • Size 641KB
                                              • SHA256 7ab90295a52565e26dca106c4aa0d8c0ace1b9d0067b0b957e281ebcd879ec09
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              el.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\el.pak
                                              • Size 1.1MB
                                              • SHA256 cf08478683bdcceba9e2ced67f9f36761242df3c3b515d8f20da784ab0286d60
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              en-GB.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\en-GB.pak
                                              • Size 520KB
                                              • SHA256 924a85e9ac136eae8e4f89762d818c297aafe897c16d18442b338279fc31aa1b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              en-US.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\en-US.pak
                                              • Size 523KB
                                              • SHA256 2cb89056faab6f3c7b8dc80497b59523cae8fb3c468adf8c6855fc7ac117332a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              es-419.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\es-419.pak
                                              • Size 633KB
                                              • SHA256 24019764e0932343823ff0702679c967e169b9a520b8c72f43064b9a98540ad1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              es.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\es.pak
                                              • Size 627KB
                                              • SHA256 4fa12830ef3aea54408d9251d747d1d10d63c088dac9f3157924394c6ec7a044
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              fi.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\fi.pak
                                              • Size 588KB
                                              • SHA256 dff922e8d85f947774fc3cfa4cd696e6f32b011d63687f6c7637324a2e14f13c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              browser_assistant.exe

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                              • Size 5.2MB
                                              • SHA256 4a5fd953fd0e1c3085ae68fa3984083b6273b2fecad4cbd5149f9b20a720e7e5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              opera.exe

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                              • Size 2.8MB
                                              • SHA256 5cd0fd3cf2f5debada24ad0e8cacf6a271b82056b8a1ea6d0b345bb1ea282c8e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Opera GX Browser.lnk

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\Opera GX Browser.lnk
                                              • Size 1KB
                                              • SHA256 96a6354426c335e2b1931023278b42f8e6c47f7d2c33540fc86ce760fad31017
                                              • MD5 SHA1 SHA512 TLSH

                                              additional_file0.tmp

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\additional_file0.tmp
                                              • Size 2.8MB
                                              • SHA256 0f50bda78a34e09ccfd5e33a7958de9eebe9863cc3d875e8b9c52dec3f3a9992
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              assistant_installer.exe

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe
                                              • Size 2.5MB
                                              • SHA256 e86907d20a18c6b99e270a4422e0c279079e8a118b6bd7fbb4001161ddc881f4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              dbgcore.DLL

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\dbgcore.DLL
                                              • Size 196KB
                                              • SHA256 a2777992696c953c001dabade3f236f731987b58061efd8c894815f9939f979c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              dbghelp.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\dbghelp.dll
                                              • Size 1.8MB
                                              • SHA256 102419e70ed462dd1ef4a30d94b714c4317ea838d7acc85ae030dfca19f609ab
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              installer_prefs_include.json

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\installer_prefs_include.json
                                              • Size 130B
                                              • SHA256 f3db8635d3193dc0ed9b4919d6b14602398bec77d187e7de93272b11d26f7806
                                              • MD5 SHA1 SHA512 TLSH

                                              installer_prefs_include.json

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\installer_prefs_include.json
                                              • Size 855B
                                              • SHA256 49653796467912b0857b1ccf1cb0d8bffbd063b37f09525236c71cf76d560a71
                                              • MD5 SHA1 SHA512 TLSH

                                              installer_prefs_include.json.backup

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\installer_prefs_include.json.backup
                                              • Size 115B
                                              • SHA256 230412d3dd11610ccdb45128082314fcd7e41d38ef3ae81426a0d9a3814e5616
                                              • MD5 SHA1 SHA512 TLSH

                                              installer.exe

                                              • Path C:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exe
                                              • Size 9.1MB
                                              • SHA256 33566d50268068e1fab01b06431773c863627abcfa5e0614ecae1443ebfefa61
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Opera GX Browser.lnk

                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera GX Browser.lnk
                                              • Size 2KB
                                              • SHA256 e969b9f27b3c3bd92a23089d55c4e0c3ee7648c57839acd6b386ec467b0c20ce
                                              • MD5 SHA1 SHA512 TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                              • Size 40B
                                              • SHA256 24cbc7653db379dedf349138e503ec93d5f47c7eae0b3a2226d3a4b67281db13
                                              • MD5 SHA1 SHA512

                                              MANIFEST-000001

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
                                              • Size 41B
                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                              • MD5 SHA1 SHA512

                                              session_7c18ec62-e71e-4264-9aae-0fbcc156302d.raw

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_7c18ec62-e71e-4264-9aae-0fbcc156302d.raw
                                              • Size 1KB
                                              • SHA256 93961fc2a105beb2941667938b0dde3788cb9380dffca9876d33cd3b65c6d62b
                                              • MD5 SHA1 SHA512 TLSH

                                              session_7c18ec62-e71e-4264-9aae-0fbcc156302d.raw

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_7c18ec62-e71e-4264-9aae-0fbcc156302d.raw
                                              • Size 2KB
                                              • SHA256 44bc848db80b89662c0b7b53069f49bb82af196e82132460ae571fc7b9414495
                                              • MD5 SHA1 SHA512 TLSH

                                              session_7c18ec62-e71e-4264-9aae-0fbcc156302d.raw

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_7c18ec62-e71e-4264-9aae-0fbcc156302d.raw
                                              • Size 3KB
                                              • SHA256 350259b93bf476a3cf3654696f9ea22d53193d9c610830d23107e4dc7b87793c
                                              • MD5 SHA1 SHA512 TLSH

                                              session_7c18ec62-e71e-4264-9aae-0fbcc156302d.raw

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_7c18ec62-e71e-4264-9aae-0fbcc156302d.raw
                                              • Size 3KB
                                              • SHA256 1ec769c8f539ea5564706bb898dee2a8f7aa667e423e775a71e41497feb1b0c2
                                              • MD5 SHA1 SHA512 TLSH

                                              CURRENT

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\CURRENT
                                              • Size 16B
                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                              • MD5 SHA1 SHA512

                                              fe47f663-e214-43cf-b182-14180688a088.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\fe47f663-e214-43cf-b182-14180688a088.tmp
                                              • Size 162KB
                                              • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              memory/3164-423-0x00007FFADDF70000-0x00007FFADDF71000-memory.dmp

                                              memory/3164-425-0x00007FFADF0D0000-0x00007FFADF0D1000-memory.dmp