Overview

overview

8

Static

static

3

OperaGXSetup.exe

windows10-2004-x64

8

OperaGXSetup.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    115s
  • max time network
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260618-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/06/2026, 03:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaGXSetup.exe
  • Size 3.9MB
  • Sample260623-d2ewmaav4s
  • SHA256 63af216c0b4db37cefdba79a12a1a74b14721fcaa13f5d3becb262931c90941f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 8 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 64 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 5 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5328
    • C:\Users\Admin\AppData\Local\Temp\7zS0D432539\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zS0D432539\installer.exe --server-tracking-blob=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
      2⤵
      • Executes dropped EXE
      • Enumerates connected drives
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1952
      • C:\Users\Admin\AppData\Local\Temp\7zS0D432539\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS0D432539\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.82 --initial-client-data=0x2a8,0x2ac,0x2b0,0x28c,0x2b4,0x7ff60a4c7e08,0x7ff60a4c7e14,0x7ff60a4c7e20
        3⤵
        • Executes dropped EXE
        PID:620
      • C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\installer.exe" --version
        3⤵
        • Executes dropped EXE
        PID:1448
      • C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:5756
      • C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\assistant\assistant_installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\assistant\assistant_installer.exe" --version
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:988
        • C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\assistant\assistant_installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xcc4b80,0xcc4b8c,0xcc4b98
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:2488
      • C:\Users\Admin\AppData\Local\Temp\7zS0D432539\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\7zS0D432539\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=1952 --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061" --session-guid=33ac9652-5faf-40f4-a7c6-e3665af5dfbc --server-tracking-blob="ZmE3YmYxMDFlMDQzYzQwMGYwZWJlMWIwOTdkMzZiMDgxNmJiODk5MzllNDRmMDU5NmYwODk4ZjIyMTk4NGE3Yzp7ImNvdW50cnkiOiJERSIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhX2d4In0sInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS93aW5kb3dzLyIsInN5c3RlbSI6eyJwbGF0Zm9ybSI6eyJhcmNoIjoieDg2XzY0Iiwib3BzeXMiOiJXaW5kb3dzIiwib3BzeXMtdmVyc2lvbiI6IjExIiwicGFja2FnZSI6IkVYRSJ9fSwidGltZXN0YW1wIjoiMTc4MjE4NTMxNi45NTk3IiwidXNlcmFnZW50IjoiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzEzMS4wLjAuMCBTYWZhcmkvNTM3LjM2IEVkZy8xMzEuMC4wLjAiLCJ1dG0iOnt9LCJ1dWlkIjoiYjY2ZWFkY2YtM2RkMi00MDExLTg3NDQtYzlkZDgyMGU4OTY3In0= " --desktopshortcut=1 --wait-for-package --initial-proc-handle=C40A000000000000
        3⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Suspicious use of WriteProcessMemory
        PID:5804
        • C:\Users\Admin\AppData\Local\Temp\7zS0D432539\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS0D432539\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.82 --initial-client-data=0x2a0,0x2a4,0x2b4,0x27c,0x2b8,0x7ff60a4c7e08,0x7ff60a4c7e14,0x7ff60a4c7e20
          4⤵
          • Executes dropped EXE
          PID:3952
        • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe" --backend --initial-pid=1952 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061" --session-guid=33ac9652-5faf-40f4-a7c6-e3665af5dfbc --server-tracking-blob="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 " --desktopshortcut=1 --install-subfolder=132.0.5905.43
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Modifies registry class
          • Suspicious use of WriteProcessMemory
          PID:3040
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x2a8,0x2ac,0x2b0,0x288,0x2b4,0x7ff68c237e08,0x7ff68c237e14,0x7ff68c237e20
            5⤵
            • Executes dropped EXE
            PID:4744
          • C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\assistant\assistant_installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • System Location Discovery: System Language Discovery
            • Modifies Internet Explorer settings
            • Suspicious use of WriteProcessMemory
            PID:2700
            • C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x24c,0x250,0x254,0xe0,0x258,0xcc4b80,0xcc4b8c,0xcc4b98
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:3144
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Suspicious use of WriteProcessMemory
              PID:6052
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x2f4b80,0x2f4b8c,0x2f4b98
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:2852
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:2608
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  • Suspicious use of WriteProcessMemory
                  PID:4400
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x174,0x178,0x17c,0x100,0x180,0x7ffd12624ff0,0x7ffd12625000,0x7ffd12625010
                    9⤵
                    • Executes dropped EXE
                    PID:2240
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Suspicious use of WriteProcessMemory
                  PID:1340
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7ffd12624ff0,0x7ffd12625000,0x7ffd12625010
                    9⤵
                    • Executes dropped EXE
                    PID:4724
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x1218378,0x1218384,0x1218390
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of WriteProcessMemory
                  PID:4956
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:2392
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7ffd12624ff0,0x7ffd12625000,0x7ffd12625010
                      10⤵
                      • Executes dropped EXE
                      PID:4280
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:2052
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7ffd12624ff0,0x7ffd12625000,0x7ffd12625010
                      10⤵
                      • Executes dropped EXE
                      PID:5488
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:4872
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x178,0x17c,0x180,0x174,0x184,0x7ffd12624ff0,0x7ffd12625000,0x7ffd12625010
                      10⤵
                      • Executes dropped EXE
                      PID:4784
          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • Drops file in Windows directory
            • Checks processor information in registry
            • Enumerates system info in registry
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of WriteProcessMemory
            PID:4316
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7ffd12624ff0,0x7ffd12625000,0x7ffd12625010
              6⤵
              • Executes dropped EXE
              PID:984
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=1856,i,14724044578650958893,2649689603942464259,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2080 /prefetch:11
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              • System Time Discovery
              • Enumerates system info in registry
              PID:2228
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1656,i,17766350142385460386,999825522073363689,262144 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2004 /prefetch:2
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:5988
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2532,i,6237250985504357996,494260876814734268,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2740 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:4868
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2596,i,16943178480429541875,8739186068278727083,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=2800 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:2056
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2052,i,6770435036950840931,17139385580679330696,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2728 /prefetch:13
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:1388
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2572,i,3179617222606360982,11429810152226500511,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=2760 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:1708
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2584,i,14183183049715934237,5453620612062156083,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=2780 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:2916
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2608,i,8128722158973833858,7205294776222217815,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=2808 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:1844
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2620,i,7675734920563202704,3947901181224393892,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=2836 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:5560
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3716,i,2297009387379172612,12377285958889123338,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3732 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:4960
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_gx_splash.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
              6⤵
              • Executes dropped EXE
              PID:6452
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4652,i,8790608678299862264,15991860466032326573,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4656 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:7128
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4824,i,12627854633897460248,17312873024827792113,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4840 /prefetch:9
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:7156
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5008,i,18175634856140032420,13139715326841373769,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4992 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:6236
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5212,i,7234392343297200505,4077521988932261142,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5228 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:5620
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5248,i,9810897510754166469,10284361453860278363,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5352 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:4536
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5340,i,5074413015716190034,5048110588978405891,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5368 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:2448
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5360,i,9675113801932965564,16124421521223743905,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5400 /prefetch:14
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:1740
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5364,i,10295648557347961889,395692254866849316,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5420 /prefetch:14
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:1148
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6024,i,5122880627231411360,10967873501009500533,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5888 /prefetch:9
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:6540
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3704,i,15847690181765426243,18146547363076619830,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=5800 /prefetch:9
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:7204
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=7104,i,12417879672712405667,9801175118182594500,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6908 /prefetch:9
              6⤵
              • Enumerates system info in registry
              PID:7276
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=7280,i,6180554405435120710,964750776680761226,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6768 /prefetch:1
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:7840
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7424,i,5054907247740777453,16278634414298818651,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7436 /prefetch:12
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:7936
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7668,i,5666843762408736121,2672806524268039598,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7604 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:7792
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7680,i,14378208445048653576,3494231748082104249,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7808 /prefetch:14
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:7804
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7816,i,6970070431438389670,10267467175348943623,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7048 /prefetch:14
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:7680
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7596,i,13004481425098748507,12175098580311762976,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8056 /prefetch:14
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:7532
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7628,i,15517921967857363047,14987397659169658590,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8076 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:7712
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8044,i,5733453422728315212,12056311660610889447,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8096 /prefetch:14
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:7856
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7608,i,16853105636839246858,11431478696088672504,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8116 /prefetch:14
              6⤵
              • Executes dropped EXE
              • System Network Configuration Discovery: Internet Connection Discovery
              • Enumerates system info in registry
              PID:7864
            • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:4180
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff6709c3900,0x7ff6709c390c,0x7ff6709c3918
                7⤵
                  PID:7252
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8676,i,9030468263612175541,430608183507191211,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8724 /prefetch:14
                6⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:6432
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8636,i,5927947496828302295,16550052598354372322,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8748 /prefetch:14
                6⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:6484
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8652,i,263782012176869351,5782611054338603325,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8768 /prefetch:14
                6⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:6928
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8712,i,14189023169480001444,3250217934341976590,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8788 /prefetch:14
                6⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:6648
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8664,i,8959808841243043198,15604948661818092722,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8692 /prefetch:14
                6⤵
                • Executes dropped EXE
                PID:6604
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9384,i,8037464837989695176,9613954633348904744,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9432 /prefetch:9
                6⤵
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:6708
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9984,i,15657229069244862363,5218867649432723182,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10000 /prefetch:14
                6⤵
                  PID:6444
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10144,i,17083883384912412083,13212680376611879368,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10152 /prefetch:14
                  6⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:6504
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10284,i,75555078133788944,8956528958135216454,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10292 /prefetch:14
                  6⤵
                  • Enumerates system info in registry
                  PID:7152
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10456,i,10562682717267580603,6435655002453037038,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10468 /prefetch:14
                  6⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:7912
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=10616,i,11826669067164415467,9528619680790021071,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10612 /prefetch:1
                  6⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:5616
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10744,i,9342284851651522569,5372102155118274187,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=3764 /prefetch:14
                  6⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:6260
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8460,i,15258876966726376197,52300207297044668,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=8452 /prefetch:14
                  6⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:2676
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8412,i,10736781891952731805,14616871702344009442,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=8404 /prefetch:14
                  6⤵
                    PID:7088
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10600,i,3436693272714292024,1141948097300563838,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=8260 /prefetch:14
                    6⤵
                    • Enumerates system info in registry
                    PID:6864
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5952,i,16234349993746646718,5069757102792276165,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=5640 /prefetch:14
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:4836
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8608,i,13647805330097609610,14710406453231622995,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=8376 /prefetch:14
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:7908
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8040,i,3794461226734259662,3934835159432782278,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11012 /prefetch:14
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:7560
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3000,i,17578103729669493975,11361947189827642938,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=5644 /prefetch:14
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:7020
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10104,i,765681167666206305,8259522311860647391,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=10068 /prefetch:14
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:2196
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3428,i,8098857408273228799,13247322602350122147,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=8728 /prefetch:14
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:6492
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3504,i,16595892909077191513,7096475185759107728,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=9104 /prefetch:14
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:7388
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3464,i,1819002795064773999,2336078550159531434,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=9064 /prefetch:14
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:6288
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2608,i,13887769886091677344,4807873054109527083,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=9072 /prefetch:14
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:2064
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3476,i,4881609884987194435,5290275731257365794,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=9044 /prefetch:14
                    6⤵
                    • Enumerates system info in registry
                    PID:5920
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10604,i,6148456304775423204,14941978199278415940,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=3436 /prefetch:14
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:2084
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8852,i,14877805180800633792,2402873161322041790,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8776 /prefetch:14
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:7472
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=7988,i,6359175665051466758,13914413626679115528,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8032 /prefetch:9
                    6⤵
                    • Enumerates system info in registry
                    PID:1608
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=11112,i,11299625241786402413,6117855187448979089,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=11124 /prefetch:14
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:7664
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=10024,i,4169786302916348096,11448546290175714299,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=2604 /prefetch:14
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:3196
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7744,i,11251473142217812629,10374102648021736491,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=11184 /prefetch:14
                    6⤵
                    • Enumerates system info in registry
                    PID:7700
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=10152,i,7372614171095704821,9386856178188625858,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=10056 /prefetch:9
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:6436
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=8196,i,12888607734845151264,16267454842994823663,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=8148 /prefetch:9
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:8440
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=8588,i,13091270281027179499,279514260200597000,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=8428 /prefetch:9
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:9124
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=8308,i,17353241066233286451,509905893234483102,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=10764 /prefetch:1
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:8308
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=3032,i,9468108860870727933,10911166318765407811,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=3892 /prefetch:9
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:8804
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=3460,i,15052247842613782171,15468109592531402335,2097152 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=9060 /prefetch:9
                    6⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:9132
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=4616,i,14859175880766807684,12464517866403484383,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=6840 /prefetch:14
                    6⤵
                      PID:6660
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8328,i,6703150524206211095,18439671130176446277,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=852 /prefetch:14
                      6⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:6632
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7672,i,1456565949642911763,16382815309993110491,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=7248 /prefetch:14
                      6⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:2064
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7760,i,16688854591194181678,17286450855352004307,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=7052 /prefetch:14
                      6⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:6452
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8288,i,6681689816272291365,10409139697981546388,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=7500 /prefetch:14
                      6⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:7504
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7776,i,5650925958094598828,15096724069861723288,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=2804 /prefetch:14
                      6⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:844
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7716,i,14591440127210969995,11527322090765339308,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=3844 /prefetch:14
                      6⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:6764
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7728,i,2048491082576928765,17057132771661815893,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=8248 /prefetch:14
                      6⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:6828
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7740,i,6120708667597109826,5997090426364315420,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=3868 /prefetch:14
                      6⤵
                        PID:6492
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=11172,i,16674896000601282249,11973415253570295839,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=7156 /prefetch:14
                        6⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:5920
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=11180,i,4456174288911691715,16284751824202697379,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=7216 /prefetch:14
                        6⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:7876
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-ref:DNA-99214_GXCTest25,GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7600,i,782706872576108616,18118514032305168071,524288 --field-trial-handle=2012,i,4913288688822467958,1837636659530551470,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2016,i,10542975421673724909,13449033701330620550,4 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=7212 /prefetch:14
                        6⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:8180
            • C:\Windows\system32\svchost.exe
              C:\Windows\system32\svchost.exe -k GPSvcGroup
              1⤵
                PID:2832
              • C:\Windows\system32\sihost.exe
                sihost.exe
                1⤵
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of WriteProcessMemory
                PID:4616
                • C:\Windows\explorer.exe
                  explorer.exe /LOADSAVEDWINDOWS
                  2⤵
                  • Boot or Logon Autostart Execution: Active Setup
                  • Enumerates connected drives
                  • Checks SCSI registry key(s)
                  • Modifies Internet Explorer settings
                  • Modifies registry class
                  • Suspicious behavior: EnumeratesProcesses
                  • Suspicious use of AdjustPrivilegeToken
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of SetWindowsHookEx
                  PID:3872
              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                1⤵
                • Modifies registry class
                • Suspicious use of SetWindowsHookEx
                PID:1408
              • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                1⤵
                • Modifies registry class
                • Suspicious use of SetWindowsHookEx
                PID:1540
              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                1⤵
                • Enumerates system info in registry
                PID:4440
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff6709c3900,0x7ff6709c390c,0x7ff6709c3918
                  2⤵
                    PID:6560
                  • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                    "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
                    2⤵
                      PID:3388
                  • C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s SSDPSRV
                    1⤵
                      PID:7864

                    Network

                          MITRE ATT&CK Enterprise v16

                          Reconnaissance

                          Resource Development

                          Initial Access

                          Execution

                          Persistence

                          Boot or Logon Autostart Execution

                          2
                          T1547

                          Active Setup

                          1
                          T1547.014

                          Registry Run Keys / Startup Folder

                          1
                          T1547.001

                          Event Triggered Execution

                          1
                          T1546

                          Component Object Model Hijacking

                          1
                          T1546.015

                          Privilege Escalation

                          Boot or Logon Autostart Execution

                          2
                          T1547

                          Active Setup

                          1
                          T1547.014

                          Registry Run Keys / Startup Folder

                          1
                          T1547.001

                          Event Triggered Execution

                          1
                          T1546

                          Component Object Model Hijacking

                          1
                          T1546.015

                          Defense Evasion

                          Modify Registry

                          3
                          T1112

                          Credential Access

                          Credentials from Password Stores

                          1
                          T1555

                          Credentials from Web Browsers

                          1
                          T1555.003

                          Unsecured Credentials

                          1
                          T1552

                          Credentials In Files

                          1
                          T1552.001

                          Discovery

                          Peripheral Device Discovery

                          2
                          T1120

                          Query Registry

                          6
                          T1012

                          System Information Discovery

                          5
                          T1082

                          System Location Discovery

                          1
                          T1614

                          System Language Discovery

                          1
                          T1614.001

                          System Network Configuration Discovery

                          1
                          T1016

                          Internet Connection Discovery

                          1
                          T1016.001

                          System Time Discovery

                          1
                          T1124

                          Lateral Movement

                          Collection

                          Data from Local System

                          1
                          T1005

                          Command and Control

                          Exfiltration

                          Impact

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          prep_Activatable Class_Hermes_perf.cache
                          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                          • Size 599B
                          • SHA256 e70e850ae837c3ac89bbdc68a172455f14eaa909108dd2f94b137d842c6bb99e
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          prep_Activatable Class_Hermes_perf.cache
                          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                          • Size 599B
                          • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          132.0.5905.43.manifest
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\132.0.5905.43.manifest
                          • Size 225B
                          • SHA256 0eb93f246ca9ae50ab6056af4cc5746fe244ec4ccdb38175b2eb2e80286a27c7
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          150x150Logo.scale-100.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-100.png
                          • Size 2KB
                          • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          150x150Logo.scale-100_contrast-white.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-100_contrast-white.png
                          • Size 1KB
                          • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          150x150Logo.scale-140.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-140.png
                          • Size 3KB
                          • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          150x150Logo.scale-140_contrast-white.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-140_contrast-white.png
                          • Size 2KB
                          • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          150x150Logo.scale-180.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-180.png
                          • Size 3KB
                          • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          150x150Logo.scale-180_contrast-white.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-180_contrast-white.png
                          • Size 3KB
                          • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          150x150Logo.scale-80.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-80.png
                          • Size 1KB
                          • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          150x150Logo.scale-80_contrast-white.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-80_contrast-white.png
                          • Size 1KB
                          • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          70x70Logo.scale-100.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-100.png
                          • Size 1KB
                          • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          70x70Logo.scale-100_contrast-white.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-100_contrast-white.png
                          • Size 1KB
                          • SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          70x70Logo.scale-140.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-140.png
                          • Size 1KB
                          • SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          70x70Logo.scale-140_contrast-white.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-140_contrast-white.png
                          • Size 1KB
                          • SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          70x70Logo.scale-180.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-180.png
                          • Size 2KB
                          • SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          70x70Logo.scale-180_contrast-white.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-180_contrast-white.png
                          • Size 2KB
                          • SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          70x70Logo.scale-80.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-80.png
                          • Size 1KB
                          • SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          70x70Logo.scale-80_contrast-white.png
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-80_contrast-white.png
                          • Size 901B
                          • SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          CChromaEditorLibrary64.dll
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\CChromaEditorLibrary64.dll
                          • Size 145KB
                          • SHA256 d092a6ac9e3b41c80e6d8eb09cce8efeb22e142bba4551c5c680273de0e4341a
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          CUESDK.x64_2017.dll
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\CUESDK.x64_2017.dll
                          • Size 474KB
                          • SHA256 7c46fd5e0338361ad3528f3dec72dcb4a9ae20d386fcb1cc214a801737108b3a
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          assistant_package
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\assistant_package
                          • Size 3.6MB
                          • SHA256 6cb3ed0b791b2319305c23a43353a5db2081b4013289162d54ceade5b2b7e203
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          d3dcompiler_47.dll
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\d3dcompiler_47.dll
                          • Size 4.5MB
                          • SHA256 31b57aa72c8773469132d587b5de1ce6c1d672e7a1c02b51bc7be114f17af437
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          dxcompiler.dll
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\dxcompiler.dll
                          • Size 24.5MB
                          • SHA256 47c488edf53904b9bf7fca8907a6b6940557f3ea01127845abcd9e518cefb13f
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          dxil.dll
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\dxil.dll
                          • Size 1.5MB
                          • SHA256 e86e64046a4ed5050b16defac296e4ef4abd936f7cdceb47aa2fe498867fa761
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          files_list
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\files_list
                          • Size 4KB
                          • SHA256 ee7e23266f512e69b95afa630f4539d894290ba35a026e93aba0425c390b0219
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          headless_command_resources.pak
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\headless_command_resources.pak
                          • Size 2KB
                          • SHA256 b3175eb086ccedcddd282b5847a23687a8a8ee37bf485851efc36a7600a2acfe
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          icudtl.dat
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\icudtl.dat
                          • Size 10.4MB
                          • SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          installer.exe
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe
                          • Size 9.1MB
                          • SHA256 9614c38d5fea1c81e2f421f27c1d427ba7083085a2eb9ab17e3285e8bb0dde8a
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          installer_helper_64.exe
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer_helper_64.exe
                          • Size 649KB
                          • SHA256 80d6bff0207e8fe5560c6277ae4c67e6b12656363fdcde82ae030ff9c40d949c
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          libEGL.dll
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\libEGL.dll
                          • Size 501KB
                          • SHA256 01b100af6f95eb34dc190a4d854ced381cc23eebc316e9195ad9baeaddaeb51f
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          libGLESv2.dll
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\libGLESv2.dll
                          • Size 7.5MB
                          • SHA256 d3117fd2d0e0279eb62807a7212d0f9db6b58b159b223eba8c6578a846563fd3
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          bg.pak
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\bg.pak
                          • Size 1.0MB
                          • SHA256 2cd44de4f707f0cbaa460446b71f178c09677f54b58e36de3245928f53e5334b
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          bn.pak
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\bn.pak
                          • Size 1.3MB
                          • SHA256 9316bebdfb4de3d7bd922f4cecf6cb14a180a5de0e1cee9aa6d826cad929d06e
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          ca.pak
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\ca.pak
                          • Size 644KB
                          • SHA256 4f2282548621f11973e493642c114323e658c5d68d8e9eca139bd84e8dc28544
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          cs.pak
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\cs.pak
                          • Size 642KB
                          • SHA256 079aeb18c44c58677f657f4b3b6b89550f3296bd46f37728acf9179015354c26
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          da.pak
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\da.pak
                          • Size 593KB
                          • SHA256 a627fc78602dfef085badd85a6d3e78dfc889719e99b98787fdfe6f6ddf358c3
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          de.pak
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\de.pak
                          • Size 641KB
                          • SHA256 7ab90295a52565e26dca106c4aa0d8c0ace1b9d0067b0b957e281ebcd879ec09
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          el.pak
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\el.pak
                          • Size 1.1MB
                          • SHA256 cf08478683bdcceba9e2ced67f9f36761242df3c3b515d8f20da784ab0286d60
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          en-GB.pak
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\en-GB.pak
                          • Size 520KB
                          • SHA256 924a85e9ac136eae8e4f89762d818c297aafe897c16d18442b338279fc31aa1b
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          en-US.pak
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\en-US.pak
                          • Size 523KB
                          • SHA256 2cb89056faab6f3c7b8dc80497b59523cae8fb3c468adf8c6855fc7ac117332a
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          es-419.pak
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\es-419.pak
                          • Size 633KB
                          • SHA256 24019764e0932343823ff0702679c967e169b9a520b8c72f43064b9a98540ad1
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          installer_prefs.json
                          • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json
                          • Size 1KB
                          • SHA256 71ae27afac1b0b231e36a0a49cb233ce13297bca4e78bde6bf7e89be9b706800
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          Opera GX Browser.lnk
                          • Path C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\Opera GX Browser.lnk
                          • Size 1KB
                          • SHA256 32dd2c9d3c150ef97c91696df4eb7bf22180f2976f5e64191dc02d4f73d3dbd6
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          additional_file0.tmp
                          • Path C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\additional_file0.tmp
                          • Size 2.8MB
                          • SHA256 0f50bda78a34e09ccfd5e33a7958de9eebe9863cc3d875e8b9c52dec3f3a9992
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          assistant_installer.exe
                          • Path C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\assistant\assistant_installer.exe
                          • Size 2.5MB
                          • SHA256 e86907d20a18c6b99e270a4422e0c279079e8a118b6bd7fbb4001161ddc881f4
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          dbgcore.DLL
                          • Path C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\assistant\dbgcore.DLL
                          • Size 196KB
                          • SHA256 a2777992696c953c001dabade3f236f731987b58061efd8c894815f9939f979c
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          dbghelp.dll
                          • Path C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\assistant\dbghelp.dll
                          • Size 1.8MB
                          • SHA256 102419e70ed462dd1ef4a30d94b714c4317ea838d7acc85ae030dfca19f609ab
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          installer_prefs_include.json
                          • Path C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\installer_prefs_include.json
                          • Size 115B
                          • SHA256 230412d3dd11610ccdb45128082314fcd7e41d38ef3ae81426a0d9a3814e5616
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          installer_prefs_include.json
                          • Path C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\installer_prefs_include.json
                          • Size 130B
                          • SHA256 f3db8635d3193dc0ed9b4919d6b14602398bec77d187e7de93272b11d26f7806
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          installer_prefs_include.json
                          • Path C:\Users\Admin\AppData\Local\Temp\.opera\2e019826-7707-46b2-a0d5-b1992f896773 Opera GX Installer Temp\opera_package_202606230430061\installer_prefs_include.json
                          • Size 829B
                          • SHA256 d46e4125d60032e6aa6175610e4806605bc9185f6873eba741843cae0dd342e8
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          225b30e5-3dd0-479d-a355-bcc3eaa65ca9.tmp
                          • Path C:\Users\Admin\AppData\Local\Temp\225b30e5-3dd0-479d-a355-bcc3eaa65ca9.tmp
                          • Size 472KB
                          • SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          3f7cbf71-fad1-43c5-8dc2-289454f68c2e.tmp
                          • Path C:\Users\Admin\AppData\Local\Temp\3f7cbf71-fad1-43c5-8dc2-289454f68c2e.tmp
                          • Size 14KB
                          • SHA256 1063c0cf8fa368edbeb9d05655366387b9b4c5c4e30b6d124ff31ea4517a6b3f
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          installer.exe
                          • Path C:\Users\Admin\AppData\Local\Temp\7zS0D432539\installer.exe
                          • Size 9.1MB
                          • SHA256 33566d50268068e1fab01b06431773c863627abcfa5e0614ecae1443ebfefa61
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          85446779-03a7-4b90-a636-363cf215c3c1.tmp
                          • Path C:\Users\Admin\AppData\Local\Temp\85446779-03a7-4b90-a636-363cf215c3c1.tmp
                          • Size 2.6MB
                          • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          d944973b-0804-4152-a079-0a3095a92838.tmp
                          • Path C:\Users\Admin\AppData\Local\Temp\d944973b-0804-4152-a079-0a3095a92838.tmp
                          • Size 4.2MB
                          • SHA256 c8e9651b963f95c499f283799aa8ba4a2023970bad575445fbabb71d87195b3e
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Icon_Light_Neutral.png
                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4316_1281926936\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                          • Size 2KB
                          • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          rules.json
                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4316_1281926936\CRX_INSTALL\rules.json
                          • Size 839B
                          • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          cos-bridge.js
                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4316_1626243189\CRX_INSTALL\cos-bridge.js
                          • Size 173B
                          • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          cos-content.js
                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4316_1626243189\CRX_INSTALL\cos-content.js
                          • Size 502B
                          • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          favicon_opera_one.png
                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4316_1807769531\CRX_INSTALL\favicon_opera_one.png
                          • Size 2KB
                          • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          manifest.json
                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4316_358404731\CRX_INSTALL\manifest.json
                          • Size 1KB
                          • SHA256 18703b1ca25258b80e2df058a24a2ade5a7159b59aa3e6d339f281459680f95a
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          messages.json
                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4316_617056234\CRX_INSTALL\_locales\en\messages.json
                          • Size 396B
                          • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          Icon_Light_Neutral.png
                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4316_617056234\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                          • Size 962B
                          • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          manifest.json
                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4316_617056234\CRX_INSTALL\manifest.json
                          • Size 1KB
                          • SHA256 b655477791478d7f6f560c740fcd142b504c7f3a73093031a3257abc43fd95ce
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          popup.js.LICENSE.txt
                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4316_617056234\CRX_INSTALL\popup.js.LICENSE.txt
                          • Size 1KB
                          • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          5b2f298003693000.customDestinations-ms
                          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5b2f298003693000.customDestinations-ms
                          • Size 24KB
                          • SHA256 a1a086159388dfef841e73068d0ab8eb4adac6ab10644e615f4068ffc86e75f6
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          5b2f298003693000.customDestinations-ms
                          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5b2f298003693000.customDestinations-ms
                          • Size 24KB
                          • SHA256 9c0d2b61efff499b918e1c72ccd8e5f6012fd7b55a0beac0d224fb7390efde65
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          settings.dat
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                          • Size 40B
                          • SHA256 16d0692182d44c2036d963f156a661ddfa96b5b664d506a68e908acae10f9a33
                          • MD5 SHA1 SHA512
                          Submit Download

                          3a1f1fdf-2e56-4551-906c-375ca758f89c.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\3a1f1fdf-2e56-4551-906c-375ca758f89c.tmp
                          • Size 85KB
                          • SHA256 88f3d909940a1aa250402674b8a6623ee3cbd1e9b151db07e3a3b78cd6e353b3
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          5cc4d80d-aec4-424f-bd56-36c54f0aeb68.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\5cc4d80d-aec4-424f-bd56-36c54f0aeb68.tmp
                          • Size 20KB
                          • SHA256 d3fb7c711fe4386a1f75e556f8362fead168ab91d04bc907729233b377b1382c
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          96c9db98-f542-4de4-85f2-874ccd667610.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\96c9db98-f542-4de4-85f2-874ccd667610.tmp
                          • Size 162KB
                          • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Bookmarks
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks
                          • Size 24KB
                          • SHA256 6474a2100068ebf2f936160bc56cb91c22542e8ca9cd0d99dd507d6bc584714a
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          the-real-index
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                          • Size 48B
                          • SHA256 f3c08c51fa7131cad1cb327f31b408cfb02f58d0b214413839d4b39a53ba7dd8
                          • MD5 SHA1 SHA512
                          Submit Download

                          the-real-index
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                          • Size 2KB
                          • SHA256 6bb5cdefeaf5bba9c4cce9bb62747edad2b6bb371c5893b75cc4dfc33c267a44
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          MANIFEST-000001
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
                          • Size 41B
                          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                          • MD5 SHA1 SHA512
                          Submit Download

                          messages.json
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
                          • Size 2KB
                          • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          background.js
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
                          • Size 17KB
                          • SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          twitch16.png
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
                          • Size 370B
                          • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          twitch48.png
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
                          • Size 921B
                          • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          main.js
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.4_0\main.js
                          • Size 47KB
                          • SHA256 6aa809057957dd9c15900268b817b8ca0f87e0254086f80dbc58fa5b824819b4
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          manifest.json
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.4_0\manifest.json
                          • Size 1KB
                          • SHA256 b19b1ebae315de34968048f3b4b42fbcef9ef2ec5a7554a7776901f4a74a5823
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          blacklist.js
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.44.0.4_0\blacklist.js
                          • Size 76KB
                          • SHA256 f1b32cb1d1c44fa82bb3c377ca44d84f97fbad4142955ae6a8e989b1fb3032d6
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          common.js
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.44.0.4_0\common.js
                          • Size 1.8MB
                          • SHA256 e51b78c81a0ab467945ee2033f54aed1abb282303575b8f1613663ea00b3b59b
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          favicon_opera_one.png
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.44.0.4_0\favicon_opera_one.png
                          • Size 2KB
                          • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          reader_mode.js
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.44.0.4_0\reader_mode.js
                          • Size 112KB
                          • SHA256 f13bffb4c8373667ab9f08bbb4c9be6ce884a96f9f23048e4de39519155dafc5
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          service_worker.js
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.44.0.4_0\service_worker.js
                          • Size 65KB
                          • SHA256 d3269c201bbb37070527e852e1f4bb2c4ebcf2977bf47ccbe2ae32923b1abd11
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          spotify_frame_interceptor.js
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.44.0.4_0\spotify_frame_interceptor.js
                          • Size 5KB
                          • SHA256 38f24dc260400dff44c04d95244dd245578a618965c692edeb103ef6d46cb5d9
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          vendors.js
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.44.0.4_0\vendors.js
                          • Size 2.3MB
                          • SHA256 599e82185cb87ee51b979a13c8f752786512e7de9468eb73207bd51c5bae206a
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          messages.json
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\_locales\en\messages.json
                          • Size 429B
                          • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          background.js
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                          • Size 86KB
                          • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Icon_Dark_Active.png
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Active.png
                          • Size 2KB
                          • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          Icon_Dark_Available_Red.png
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Available_Red.png
                          • Size 2KB
                          • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          Icon_Dark_Available_Yellow.png
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Available_Yellow.png
                          • Size 2KB
                          • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          Icon_Light_Neutral.png
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                          • Size 2KB
                          • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          Icon_Dark_Active.png
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Active.png
                          • Size 883B
                          • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          Icon_Dark_Available_Red.png
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Available_Red.png
                          • Size 895B
                          • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          Icon_Dark_Available_Yellow.png
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Available_Yellow.png
                          • Size 895B
                          • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          Icon_Light_Neutral.png
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Light_Neutral.png
                          • Size 932B
                          • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          index.html
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\index.html
                          • Size 222B
                          • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          computed_hashes.json
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\_metadata\computed_hashes.json
                          • Size 73KB
                          • SHA256 6981ab0e6f2328f8b6f583cee4b68ca6cb8359e800387774dac97df21043e0c4
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          verified_contents.json
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\_metadata\verified_contents.json
                          • Size 6KB
                          • SHA256 7962ed372049509eb040645a6a96d37c60414647f7d7c6852d20e183d8fca45d
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          manifest.json
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\manifest.json
                          • Size 1KB
                          • SHA256 4dc8cf07548e8abda9ccaed742ce955a4cce2b524abf4a2a73a5411c22aa567c
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          MANIFEST-000001
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\MANIFEST-000001
                          • Size 23B
                          • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                          • MD5 SHA1 SHA512
                          Submit Download

                          1c78ac42-db6c-4eb6-a9e3-542a05013a30.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\1c78ac42-db6c-4eb6-a9e3-542a05013a30.tmp
                          • Size 27KB
                          • SHA256 c5b282a24d9ef3ca8b9ec9a229d76f55e76c8765f3d55b13ae9d0f6501c7b0fd
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          88a5b71d-1ec0-492e-a8a9-d9223d6aab91.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\88a5b71d-1ec0-492e-a8a9-d9223d6aab91.tmp
                          • Size 27KB
                          • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          91640fd3-078f-47ae-84de-16420bb759cb.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\91640fd3-078f-47ae-84de-16420bb759cb.tmp
                          • Size 27KB
                          • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          aae29721-f4e4-468a-8350-d22126b61d30.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\aae29721-f4e4-468a-8350-d22126b61d30.tmp
                          • Size 27KB
                          • SHA256 1cf990618d717d9febe7f274ca61fa0f03d3ff5265fca7080f51999e3dd38ea9
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          c0ce34d9-e2d6-483d-a873-72a9d9bbf117.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\c0ce34d9-e2d6-483d-a873-72a9d9bbf117.tmp
                          • Size 27KB
                          • SHA256 f5c9674ecba70bfabdfee3de3b5d3de36401afc3371ef013eeb204568b27d4a2
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          f10bb101-3ab4-4efc-b487-be87283778bc.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\f10bb101-3ab4-4efc-b487-be87283778bc.tmp
                          • Size 27KB
                          • SHA256 35f2a396e255a1ed1779b56fb097e46f6e17119c2ba84fe609a01cccbdfcc18c
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          f20a929b-bded-4a02-a0c4-bd79402ed867.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\f20a929b-bded-4a02-a0c4-bd79402ed867.tmp
                          • Size 27KB
                          • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          13b5decf-3b8b-4ead-9b24-1725250e3bf8.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\13b5decf-3b8b-4ead-9b24-1725250e3bf8.tmp
                          • Size 59B
                          • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          Network Persistent State
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                          • Size 4KB
                          • SHA256 93dc5e349a73d40dec7389c6882ef47fbc1115b6197d6cebad535548f9989e11
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Preferences
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                          • Size 13KB
                          • SHA256 618d569bf00af1e6ac6542d39b4e8176a24132a55add610b0b6d111c6e2d4221
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Preferences
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                          • Size 12KB
                          • SHA256 805f1b39868484ec46a9e660b3096ac117893d9a02076a2a664cae270c0cd227
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          Secure Preferences
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                          • Size 213KB
                          • SHA256 0fa5664c1bc52ca856fae95b829b2430b95fba5d5b4c9585af1197671a1489c0
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          index
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\070f036f-121e-45a8-90e5-0025579a62e3\index
                          • Size 24B
                          • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                          • MD5 SHA1 SHA512
                          Submit Download

                          2528ddac-3e01-4c52-a03c-ab7182f51b69.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\070f036f-121e-45a8-90e5-0025579a62e3\index-dir\2528ddac-3e01-4c52-a03c-ab7182f51b69.tmp
                          • Size 48B
                          • SHA256 a436e3b3702d0140dcfcd8e58328ec93febe7187b2152cfb81e9190419710041
                          • MD5 SHA1 SHA512
                          Submit Download

                          the-real-index
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\070f036f-121e-45a8-90e5-0025579a62e3\index-dir\the-real-index
                          • Size 144B
                          • SHA256 19f370007890c3ae620cf447b933795435eee8aa76ee4c45cc91ba4784650628
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          7a7f3939-5320-4bd2-a202-f43ae8b906bb.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\51f84e0f-8c6a-4755-9190-eb0fe38a1ecc\index-dir\7a7f3939-5320-4bd2-a202-f43ae8b906bb.tmp
                          • Size 48B
                          • SHA256 86630cf6c5694cd6d7cfb3273bca9454f3427772a0d0de90ddb925f77470cb3f
                          • MD5 SHA1 SHA512
                          Submit Download

                          the-real-index
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\51f84e0f-8c6a-4755-9190-eb0fe38a1ecc\index-dir\the-real-index
                          • Size 96B
                          • SHA256 bb0253ea650a4dd0123bc6b26b81dddcc23c31a80f342eaefe3f64a3d474e669
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          b14802d4-3063-4d04-9faf-717d56bb2517.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\b14802d4-3063-4d04-9faf-717d56bb2517.tmp
                          • Size 141B
                          • SHA256 fcf9a84f27a7550aaab1e9339ba14cd6e1fb85ab4fc7ce011c32c7de4b034c89
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          index.txt
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
                          • Size 208B
                          • SHA256 f6654fbc9a7ac383395bf5c7ddfdaf7980518132b5ac4afe1fe2a6865dcdfad0
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          index.txt
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
                          • Size 203B
                          • SHA256 b89154b1252d1927d3321ade353133d7c8306952fefdb6f1bc39464dc3dfff53
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          b0466fef-1d89-4ab1-a481-8a040e7fb3e0.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\b0466fef-1d89-4ab1-a481-8a040e7fb3e0.tmp
                          • Size 72B
                          • SHA256 a453be643e30efdea0eabbd84d5d1247bef83496253b8ea08be826bff3d066a3
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          temp-index
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                          • Size 456B
                          • SHA256 e02d4084459b1ee28c5da61d62d54b94dc141aa2d87641c8d81f92676604db51
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          the-real-index
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                          • Size 456B
                          • SHA256 fcf56d0827fb82cae1853986fc41bb2af18fe5bdb80692de809df296c34563e0
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 13KB
                          • SHA256 f59ef4ab238fda74994844c23c04a1ec7ede5b58ba75388580fd6071b1b56163
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 13KB
                          • SHA256 1dfffc83a52cb0f388a89c5e769926c474d470935d300cce8d2173c3c2474322
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 13KB
                          • SHA256 2d742597f690ab3349becfffd75cd223754a0e7f3f745aece62dbb8e1340f9f0
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 12KB
                          • SHA256 4f98067224c3ed1c140790f9f1637ad3bdc8471d90845c200cad5e43f527cd4d
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 13KB
                          • SHA256 d181a53c10502a56c944d4806aeb12fcf397a51d5c7f07af18789e7657282d03
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 349B
                          • SHA256 c81a0ebbc7a60d24e06b44743a843ad115a59da8003223cadf79ce0261c4d083
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 573B
                          • SHA256 a3ac1b741a15bd700a0bb082c7976a79b7ba76b4d5949ffe00d4b609bae24caa
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 1KB
                          • SHA256 10a2cd49ed5f83451057866e531649f1b00a37923beb9e46a0a1ef31e504af84
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 1KB
                          • SHA256 e39019e1c43c78a7f869564aa106425b55d2b49e3978d1b1f0e55850124ecd35
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 3KB
                          • SHA256 93596078316c6f81ce79ba16e7e084ef5b096c9264b1090ad4170482ae7ec672
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 9KB
                          • SHA256 4079ed012f87cebec4ee0c7b2f03afe8b87dfc8c785d1df3fcca7deb82ed3dfe
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 9KB
                          • SHA256 25e0bc96dbb0b2e74b842a08f8145c36e2a97835d2822381738de9b5aa97c893
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 12KB
                          • SHA256 2c742b71db36fe107ca56706e758b086c9abbeabb74a5fd37c123265a623fda1
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 12KB
                          • SHA256 cd36d07e6f29ee734e30b2dc2ea01766b9c02113204dc0a5229fb6b57d324502
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 13KB
                          • SHA256 69d7ec93441df3d88565af828cf0bb8fbdea5316f0bad7fbc8040a4b83217e3a
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 461B
                          • SHA256 7cba3bebbdffc2a8686a8287c9f388f76f441b0ddc29c74b24f691f93ecfba85
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 701B
                          • SHA256 d18b397c7caba34af6f509fbd04a883e0661c6dfeb2b44e4a61a5f4ffd82e515
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 877B
                          • SHA256 68129470071f5d6abfe92df3ed0067b9c47e86306c53451e33f9c900e8e25911
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 1KB
                          • SHA256 2b6c2c049c6ffd235fc582b4d7a4aeea99900534a09e9b9f0fdfb7b0b79f0835
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 9KB
                          • SHA256 19453bb7b7c7b958b52cf81dd2977e79471de8d474cebd6b1615982bb5a9c04e
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 1KB
                          • SHA256 d61f71a82aa8e16bde26b3d956b103e381d7cdc6bbbf5d55d4a811f48df62b08
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 1KB
                          • SHA256 99f143516a5936b59960e7557907332662bfb56c3cb0925650ac5583325a603f
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 1KB
                          • SHA256 3176595ddb1650e389acf41fd9c98ee1099c1887167a88d40ba60735755fe335
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 1KB
                          • SHA256 b62bfeadf84001885f644413de085ed6f4bde5d695cf04d3c2898118231d5885
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 1KB
                          • SHA256 6093c323aaa23f99ab3c14981364b614e5075da8c1409ae36467b32c76e5b8a2
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 1KB
                          • SHA256 383b31b6b6bb7e8cb879f4151acd1823dd788802703479b5d3afac6fa03bbd9c
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 2KB
                          • SHA256 6a6ff7eb1072a017364bab5af6448b739497c9db9b43e271a7f15b9159b2eb66
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 2KB
                          • SHA256 7722bb73b7c538d8c50e3d590d2c3e252f75bbad53ec72a47838911bb6d1d75c
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 2KB
                          • SHA256 b81d70c7a90cff073dd93c804301a69ce9d1e7270787ebaa67108d60cb692a38
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 2KB
                          • SHA256 9a6f25edfa47e47b7509268244f4a1ab32fdfaaafac01d3c4edeebba13be598b
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 2KB
                          • SHA256 d76484e99296a0aa6eb51d5a9b8128d878f0311994d6c6fff2a582b604abdd9c
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 2KB
                          • SHA256 2544d22b7a18f244a5ad0bd10e70ea2b35ea1819fa36422b3365fa29f43db2c2
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 2KB
                          • SHA256 c1574006db3cfad6c3894e716374f14c904ce1716a46a01749f8276eb83e5929
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 3KB
                          • SHA256 cc4a62dc2ef54b919aa50a07a29fc86008c55205082000e3790c8e99e50f16cd
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 3KB
                          • SHA256 5846fce5331bb7ce76bdda2beeb48b29e493773b98caf52b26f4e050e01453a5
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 3KB
                          • SHA256 b9d69baf021076f2181b5b6c41d557d98321f3ecc1f3f5275d6402f47b301b36
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 3KB
                          • SHA256 052836290efcf559c0b22826396b6eacadfe803260e8953a7f04df89d9ff4221
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 3KB
                          • SHA256 de1350a00a130ec6a77b8d76faf5aaef9183efcaa3321dafcaf0952264ab1af0
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 9KB
                          • SHA256 a5be3283a3d282443734d407903d05f6d70d6223f33f1f9f534c81a9d0511f07
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 9KB
                          • SHA256 0d1b19b0d9b2b1cedb27068d12c4bf4ce3edee7f32e12ae88e591c8127ebd5e2
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 9KB
                          • SHA256 c7fd11f37798af2e5474071d76ca2ec594557bd426e40278cd1fb4b96decc686
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 9KB
                          • SHA256 306051498e011bf9f062c4531e3af5e8bc028aeb031f4212f8be021e039496cc
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 039b209694271fea9d405b67bd0532246247ff8d1170eadc2449926ab319cb5e
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 da02000773d754c73ed855719a4c6f8ec406d69fc4de4704bbdc2ea8f9d283f7
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 bbe6d443728221de8eddfada58d640f61a31f152649c0a1e3e545ce32c0399db
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 0bc582e1bc08ae4c2829c7b8cbcf61c443b1ced4bcda98142e9c263f4571ae34
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 c8253416d7e46b9243ae63708b12a7332a28cd1dd0605686e0b1f69933233dc6
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 0474134eaf6ef304c02d8fcf60b0b9c5be669ab122b961de2f4c91d0a49c604c
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 2167718828c3e0af964cf3d444f482f1557a0c3e40a436422ec3dc0d61d82c5f
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 fbf7fd01e6894b5ea0b20973fca8325889fae31636c02f925c2867cf451df697
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 7ca66d005964477dbb98f44512781764859b94128830fd3c021b435967969d4f
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 b5c11bf353994175739d2e1417fd8d8c537f47b779eab8b2c61c45b00dba6dd7
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 8166f85909be6f0a37c9fee63a50cf76fc60824d7e32dbfc01d5d22154c0efb5
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 8f7388756ba7e9cc07a5e099bb1d9b0692cd325359fa5f4f2b53c71260362bc4
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 d653b13091f9acf91dfe2b303609007628d3d945e451edd1bc4ac406e3260977
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 aaa272f5b9709702daf129db638480264ebb03da074c736391b8edd61579df8f
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 39bee378bcd415939bd72d24c2642c4d66803c14ca871c476d827c691a262b61
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 12KB
                          • SHA256 4fc3e8db7bcb2df33315fe552e39610fe829308a00812c0cbd98473556c2cb44
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 12KB
                          • SHA256 637ead263a0c0c9f0d646fa99ddbf4c4268f0590eedf1fb7b7ec86e1587453da
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 9KB
                          • SHA256 3cdf233ddb54ba41b8612ff3b1c9779d89ce9e28a6924fcb9d99ebf5fd3b6f43
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 11KB
                          • SHA256 0e68ab35da105f3a3bb8300cbd5e50475a8b65aaf706814c2a49889315b6189d
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 23dd4b06ee329f1eb6c8b134e796acb8fcd522cded4b8faaa45366c0b61d19c3
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 13KB
                          • SHA256 2618f7a1b3964e68b4f646d6368be23db4b136364b7519c383f867cb4f1d5740
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 12KB
                          • SHA256 926a6b00a8aa15bd2defcac49e5a38345514756992bc9f80eeec1e5651a58f20
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 13KB
                          • SHA256 ba88fd624f6ed62dd13fe091afbe1b312e44c6441c4c8eb8f6d52b4603611470
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 0346cbce8bacc5564e020fb00d5a1e44d3a1720f5d067b823098e079a1052c91
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 9KB
                          • SHA256 6d9f40bfc1a381b631fe7912543b528c131b237150b712b2d7ddba549d812cfc
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 12KB
                          • SHA256 d13e3f67a407672f3ab2c16618757dad62b81ae8f314acbc1e0eaaf9706407ab
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 13KB
                          • SHA256 33ada2b8fd19eb84af85974dd0818e42ec36857e4ef685c1ed1ded339ea92a62
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 0adc69351730b9b0512fcbc59259eb358c1aa9efc07a22fc3aeaef23a2059232
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 f009259db7d13fb3bdda8382993cedbc87b976081e85770cfbf382b7f1e65668
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 10KB
                          • SHA256 94f4bf10b638d8143257be9dfbe44bf9e55b07cffc6903db0213e80a0540cabb
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 12KB
                          • SHA256 95252b109eaf0c144eee2199e5ddf20e86cfbf844f1771a5d91e7f2500073e5e
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 11KB
                          • SHA256 00a027e1f02662a35fd5a0c468ba6fe934b7a5a7c356c329937d7c1227abda1a
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 12KB
                          • SHA256 60036a62334f55ea9aa95e0c7afb3b81444909683ed48e1d95e32b801675990d
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_a9ef8821-f4db-4788-8b0a-16d90750cd60.raw
                          • Size 12KB
                          • SHA256 8437f0240a0a93ce1b14455d23ffdc21b5ccefabeb234caedaf7edbb7f890d34
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          CURRENT
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\CURRENT
                          • Size 16B
                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                          • MD5 SHA1 SHA512
                          Submit Download

                          a3fcb0dc-1ed9-4ddc-881d-fad455b40e89.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\a3fcb0dc-1ed9-4ddc-881d-fad455b40e89.tmp
                          • Size 12KB
                          • SHA256 019fb630f06f9217bba7005841e1cfa9cb4a4862ee7cc0d6da348cf21e10a5f5
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          a732bf9c-f486-4162-990f-ebbf69efb716.tmp
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\a732bf9c-f486-4162-990f-ebbf69efb716.tmp
                          • Size 171B
                          • SHA256 c33baf0ede61334240e3e0d2f3a0dc5a08c34c9dab198d405ccd070ae976c7bf
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 1KB
                          • SHA256 31e75a92bc0cbe8b506974507d683ce287c2d3cc1d7d61b1271071b98b00116d
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 599B
                          • SHA256 787c6a94a851f0910b77983c799f7ba9677e999e8b466f83b9a9040f123ecbde
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 691B
                          • SHA256 68bf9e171e24e3e6ef34adc1fb9db916f6c3a76b802b2cb7e0e1734374c34df0
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 780B
                          • SHA256 9fa3ad3d9588e54bd29fc3f8ae2782aa475283d36b80811431dc43cc51610a83
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 875B
                          • SHA256 9a5b9da5d361c02d541c90c010e6311fa63eb2b894adff9646bccbbf7b097881
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 975B
                          • SHA256 1c59177c9237290615632a71abb4eadbd294c83b7226f045e855d58931cede28
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 1KB
                          • SHA256 7c311d1423883d412b265e7e946dde0e3e6be2b6273b0097de446c82af9634d0
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 1KB
                          • SHA256 9b00945193e996b68fa250e586489a43aa041f2cb032ec60c3066e8ac9aaace0
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 414B
                          • SHA256 aece4ab57963dd3b108d6fb49493dbe837a878b008ce280edaecf6ece43cf25c
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 507B
                          • SHA256 9d8b311c600f569a45a515687ebe20c4d876c6e1f874586587e72d50c661a7dd
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 2KB
                          • SHA256 aa09479dc302402afcec14061b455879a7990e917b63d0853280a5b51a5d8dcf
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 1KB
                          • SHA256 1885d23579639de126900e09671a73283d438a3dd595458786927929a3dd425a
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 1KB
                          • SHA256 d462232a54c5935fdbca1dbeacb1c8f64dd49a125b9753eb6f89ac00c13ea3eb
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 3KB
                          • SHA256 05bdc4371ab26471f625bb8ad22d9c19f21bae1486ccbde6597bbb32ebb873a5
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 3KB
                          • SHA256 9d26d240a3f633f2332525095b75df426fea8efd63d6e35550d6b5da6630327b
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 3KB
                          • SHA256 d8a844ab3f967cbf7d8a3bbb42446a7cf9993394ac5cbde2aa636c35c83916c3
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 3KB
                          • SHA256 1b586c527f0494bc44076e8816a0d7b57a3f70cf8a8c246e57d16cd7b130d184
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 3KB
                          • SHA256 da256b8e3ea87eb5393c29fef8ddcb08c6adf3256a75ae57d9fbc607042b58ac
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 3KB
                          • SHA256 3897a845556392efcdf2cd625c3b4034c6457585dd808840b2062d019431e971
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 4KB
                          • SHA256 3356eeef0913f1aa5e87ab23d2de73701e9719bc81bbbba4f8bd436ee906eb09
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 1KB
                          • SHA256 bc275eac2678abb19fae2a4a2356593d30e3916acafb541a9b8a2df389e66b07
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 3KB
                          • SHA256 1f77fa93b731dacad34ad69a43b1a7dc1a7fd69d560a912d93aecb6b5706d5eb
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 1KB
                          • SHA256 c094f5b5304871ad5f667b6e530f28ab07c62acab5701d401a12a2f655042de6
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.0.242626040
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.0.242626040
                          • Size 1KB
                          • SHA256 e53ba185031c6ac928200e793cbbe0d3d7cd6fefb7b2766fa200f51db81039fc
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.1.1245104799
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.1.1245104799
                          • Size 200B
                          • SHA256 cea2b155327a6f5536b6944792e59003ff3b5e381edf13029fb078d132961299
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          ssdfp4316.1.1245104799
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp4316.1.1245104799
                          • Size 224B
                          • SHA256 2fefa0fcebf1209674ac97593f017151ac32360bbc377c3a1358b78e38b91bf1
                          • MD5 SHA1 SHA512 TLSH
                          Submit Download

                          data_0
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                          • Size 8KB
                          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                          • MD5 SHA1 SHA512 SSDEEP
                          Submit Download

                          data_1
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_1
                          • Size 264KB
                          • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                          • MD5 SHA1 SHA512 SSDEEP
                          Submit Download

                          data_2
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
                          • Size 8KB
                          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                          • MD5 SHA1 SHA512 SSDEEP
                          Submit Download

                          data_3
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
                          • Size 8KB
                          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                          • MD5 SHA1 SHA512 SSDEEP
                          Submit Download

                          Local State
                          • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                          • Size 4KB
                          • SHA256 0dc98f5eb4521e21149514542263aa1870e8a32645385dc471e59e1cbb602ddd
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          memory/1408-1434-0x0000016A74480000-0x0000016A74B11000-memory.dmp
                          Download

                          memory/1540-445-0x0000021A0C200000-0x0000021A0C220000-memory.dmp
                          Download

                          memory/1540-447-0x0000021A1C590000-0x0000021A1C690000-memory.dmp
                          Download

                          memory/1540-459-0x0000021A09FA0000-0x0000021A09FC0000-memory.dmp
                          Download

                          memory/1540-481-0x0000021A1C900000-0x0000021A1C920000-memory.dmp
                          Download

                          memory/1540-359-0x0000021A068E0000-0x0000021A069E0000-memory.dmp
                          Download

                          memory/4868-416-0x00007FFD4D010000-0x00007FFD4D011000-memory.dmp
                          Download

                          memory/4868-417-0x00007FFD4D890000-0x00007FFD4D891000-memory.dmp
                          Download