Overview

overview

8

Static

static

1

KM15N5P.html

windows11-21h2-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    900s
  • max time network
    449s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    18/07/2026, 14:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    KM15N5P.html
  • Size 5KB
  • Sample260718-rmybbagx9t
  • SHA256 e81361cc8e12817f9de107aca8415715d394a0b9db34c1a72b82c48973ca6593
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

    defense_evasion
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 47 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 7 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 37 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 54 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\KM15N5P.html
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4676
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb0c4ec728,0x7ffb0c4ec734,0x7ffb0c4ec740
      2⤵
        PID:2232
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1448,i,5678709425037024409,3132289073852535319,524288 --field-trial-handle=2148,i,18061907123960071256,1372791238618093255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2180 /prefetch:11
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:2524
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1640,i,3799918560492398097,13583922332788613711,262144 --field-trial-handle=2148,i,18061907123960071256,1372791238618093255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2144 /prefetch:2
        2⤵
          PID:2484
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2272,i,17041485463886373734,1116837637756937189,524288 --field-trial-handle=2148,i,18061907123960071256,1372791238618093255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2420 /prefetch:13
          2⤵
            PID:2380
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3232,i,7594535565772124046,2788938863022147427,2097152 --field-trial-handle=2148,i,18061907123960071256,1372791238618093255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3240 /prefetch:1
            2⤵
              PID:3748
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3244,i,6828503566145087644,8192678850085791542,2097152 --field-trial-handle=2148,i,18061907123960071256,1372791238618093255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:1
              2⤵
                PID:5000
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4304,i,3155190851244769526,14427325667223410192,2097152 --field-trial-handle=2148,i,18061907123960071256,1372791238618093255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4316 /prefetch:9
                2⤵
                  PID:2616
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4032,i,14338981138473045847,16247261654864576273,2097152 --field-trial-handle=2148,i,18061907123960071256,1372791238618093255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4612 /prefetch:1
                  2⤵
                    PID:3468
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3884,i,15802219735013122379,15014749879834103313,2097152 --field-trial-handle=2148,i,18061907123960071256,1372791238618093255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4832 /prefetch:1
                    2⤵
                      PID:3212
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3480,i,12247509815990452670,14732841671361180946,2097152 --field-trial-handle=2148,i,18061907123960071256,1372791238618093255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3320 /prefetch:1
                      2⤵
                        PID:3548
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5796,i,17968512811575376795,10264157315083299772,524288 --field-trial-handle=2148,i,18061907123960071256,1372791238618093255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5800 /prefetch:14
                        2⤵
                          PID:2428
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6048,i,16535616873334069661,14308476985095876765,524288 --field-trial-handle=2148,i,18061907123960071256,1372791238618093255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5916 /prefetch:14
                          2⤵
                          • Subvert Trust Controls: Mark-of-the-Web Bypass
                          • NTFS ADS
                          PID:584
                        • C:\Users\Admin\Downloads\OperaGXSetup.exe
                          "C:\Users\Admin\Downloads\OperaGXSetup.exe"
                          2⤵
                          • Executes dropped EXE
                          • System Location Discovery: System Language Discovery
                          • Suspicious use of WriteProcessMemory
                          PID:404
                          • C:\Users\Admin\AppData\Local\Temp\7zS49113808\installer.exe
                            C:\Users\Admin\AppData\Local\Temp\7zS49113808\installer.exe --server-tracking-blob=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
                            3⤵
                            • Executes dropped EXE
                            • Enumerates connected drives
                            • Enumerates system info in registry
                            • Modifies system certificate store
                            • Suspicious use of SetWindowsHookEx
                            • Suspicious use of WriteProcessMemory
                            PID:940
                            • C:\Users\Admin\AppData\Local\Temp\7zS49113808\installer.exe
                              C:\Users\Admin\AppData\Local\Temp\7zS49113808\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff78d1ecd88,0x7ff78d1ecd94,0x7ff78d1ecda0
                              4⤵
                              • Executes dropped EXE
                              PID:5000
                            • C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\installer.exe
                              "C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\installer.exe" --version
                              4⤵
                              • Executes dropped EXE
                              PID:4836
                            • C:\Users\Admin\AppData\Local\Temp\7zS49113808\installer.exe
                              "C:\Users\Admin\AppData\Local\Temp\7zS49113808\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=940 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_20260718151953" --session-guid=8dd9983f-b737-4cb0-890c-cb394e51242d --server-tracking-blob=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 --desktopshortcut=1 --wait-for-package --initial-proc-handle=E408000000000000
                              4⤵
                              • Executes dropped EXE
                              • Enumerates connected drives
                              • Suspicious use of WriteProcessMemory
                              PID:2764
                              • C:\Users\Admin\AppData\Local\Temp\7zS49113808\installer.exe
                                C:\Users\Admin\AppData\Local\Temp\7zS49113808\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x280,0x284,0x294,0x25c,0x298,0x7ff78d1ecd88,0x7ff78d1ecd94,0x7ff78d1ecda0
                                5⤵
                                • Executes dropped EXE
                                PID:3244
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe" --backend --initial-pid=940 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531" --session-guid=8dd9983f-b737-4cb0-890c-cb394e51242d --server-tracking-blob=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 --desktopshortcut=1 --install-subfolder=133.0.5932.39
                                5⤵
                                • Executes dropped EXE
                                • Enumerates connected drives
                                • Enumerates system info in registry
                                • Modifies registry class
                                • Suspicious use of FindShellTrayWindow
                                • Suspicious use of WriteProcessMemory
                                PID:2344
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x290,0x294,0x298,0x268,0x29c,0x7ff6509ecd88,0x7ff6509ecd94,0x7ff6509ecda0
                                  6⤵
                                  • Executes dropped EXE
                                  PID:2528
                                • C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\assistant\assistant_installer.exe
                                  "C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                                  6⤵
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • Adds Run key to start application
                                  • System Location Discovery: System Language Discovery
                                  • Enumerates system info in registry
                                  • Modifies Internet Explorer settings
                                  • Suspicious use of WriteProcessMemory
                                  PID:2900
                                  • C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\assistant\assistant_installer.exe
                                    "C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x1144b80,0x1144b8c,0x1144b98
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • System Location Discovery: System Language Discovery
                                    PID:5028
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • System Location Discovery: System Language Discovery
                                    • Enumerates system info in registry
                                    • Suspicious use of WriteProcessMemory
                                    PID:4048
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0xe14b80,0xe14b8c,0xe14b98
                                      8⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • System Location Discovery: System Language Discovery
                                      PID:3240
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                                      8⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • System Location Discovery: System Language Discovery
                                      • Suspicious use of SendNotifyMessage
                                      • Suspicious use of WriteProcessMemory
                                      PID:812
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                        9⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • Suspicious use of WriteProcessMemory
                                        PID:5080
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x150,0x154,0x158,0x14c,0x15c,0x7ffae56f05a0,0x7ffae56f05b0,0x7ffae56f05c0
                                          10⤵
                                          • Executes dropped EXE
                                          PID:4240
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                        9⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • Suspicious use of WriteProcessMemory
                                        PID:1968
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffae56f05a0,0x7ffae56f05b0,0x7ffae56f05c0
                                          10⤵
                                          • Executes dropped EXE
                                          PID:2848
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0x11b8378,0x11b8384,0x11b8390
                                        9⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • System Location Discovery: System Language Discovery
                                        • Suspicious use of WriteProcessMemory
                                        PID:4044
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                          10⤵
                                          • Executes dropped EXE
                                          • Loads dropped DLL
                                          • Enumerates system info in registry
                                          • Suspicious use of WriteProcessMemory
                                          PID:1912
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x150,0x144,0x148,0x14c,0x154,0x7ffae56f05a0,0x7ffae56f05b0,0x7ffae56f05c0
                                            11⤵
                                            • Executes dropped EXE
                                            PID:1352
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                          10⤵
                                          • Executes dropped EXE
                                          • Loads dropped DLL
                                          • Enumerates system info in registry
                                          • Suspicious use of WriteProcessMemory
                                          PID:5076
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x14c,0x150,0x154,0x148,0x158,0x7ffae56f05a0,0x7ffae56f05b0,0x7ffae56f05c0
                                            11⤵
                                            • Executes dropped EXE
                                            PID:3332
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                          10⤵
                                          • Executes dropped EXE
                                          • Loads dropped DLL
                                          • Enumerates system info in registry
                                          • Suspicious use of WriteProcessMemory
                                          PID:572
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffae56f05a0,0x7ffae56f05b0,0x7ffae56f05c0
                                            11⤵
                                            • Executes dropped EXE
                                            PID:2484
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                                  6⤵
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • Adds Run key to start application
                                  • Checks processor information in registry
                                  • Enumerates system info in registry
                                  • Suspicious behavior: EnumeratesProcesses
                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                  • Suspicious use of AdjustPrivilegeToken
                                  • Suspicious use of FindShellTrayWindow
                                  • Suspicious use of SendNotifyMessage
                                  • Suspicious use of WriteProcessMemory
                                  PID:1692
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffae56f05a0,0x7ffae56f05b0,0x7ffae56f05c0
                                    7⤵
                                    • Executes dropped EXE
                                    PID:792
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,10827525278574293665,9264048471663273275,262144 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1832 /prefetch:2
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • Enumerates system info in registry
                                    PID:3660
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=1940,i,8141533427241066916,17374116146479401637,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1984 /prefetch:11
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • System Time Discovery
                                    PID:2260
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=2376,i,297018532758053400,15293256066177525073,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2388 /prefetch:13
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    PID:432
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3220,i,2570583808824922200,4976526949096201547,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3304 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    PID:3144
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3240,i,7134499401593685101,12687441455713133550,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3316 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    PID:400
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3252,i,15964173588695668998,4214044576727899926,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3336 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    PID:5068
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3264,i,14252411318267598642,2970255251043565679,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3356 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    PID:4628
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3276,i,901130921676234397,9757232881656927001,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3372 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • Enumerates system info in registry
                                    PID:4056
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3288,i,10630391781740040951,9130572629481966070,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3392 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • Enumerates system info in registry
                                    PID:336
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4012,i,17070547047023228164,7630106529451544737,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4024 /prefetch:1
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    PID:4244
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_gx_splash.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                                    7⤵
                                    • Executes dropped EXE
                                    PID:5140
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4584,i,15282162235803096764,5136193276120384295,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4600 /prefetch:1
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    PID:5308
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4776,i,7196574107975482677,2717893519352942749,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4780 /prefetch:9
                                    7⤵
                                    • Executes dropped EXE
                                    PID:5332
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4964,i,8324472348366708116,7092952693174434653,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4968 /prefetch:1
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    PID:5372
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5192,i,340901413302733924,6212398405304305731,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5204 /prefetch:1
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • Enumerates system info in registry
                                    PID:5384
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5324,i,13545106037489064551,10340700305276181588,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5332 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    PID:5400
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5320,i,16358454212451952644,273266450121910318,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5344 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • Enumerates system info in registry
                                    PID:5408
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5336,i,16065159347266910861,7791253467132479189,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5352 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    PID:5416
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5340,i,6354974065655565073,7434083415518090589,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5364 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • Enumerates system info in registry
                                    PID:5428
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6340,i,3876117992068520339,14137858961547308535,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6360 /prefetch:9
                                    7⤵
                                    • Executes dropped EXE
                                    PID:5532
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6636,i,5463525124674040897,4730274299678704515,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6648 /prefetch:9
                                    7⤵
                                    • Executes dropped EXE
                                    PID:5556
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6840,i,8486520931914269859,17710190511478042114,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6884 /prefetch:9
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:5568
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6912,i,7270237836733591636,10490846326025320835,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6580 /prefetch:1
                                    7⤵
                                    • Executes dropped EXE
                                    • Enumerates system info in registry
                                    PID:6140
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7156,i,1546268272550417237,5876292472213860604,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7160 /prefetch:12
                                    7⤵
                                    • Executes dropped EXE
                                    PID:5612
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7300,i,3495442197515011467,1826498253289947136,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7380 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Enumerates system info in registry
                                    PID:5228
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7376,i,8140410947649999794,6029319265333851917,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7396 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Enumerates system info in registry
                                    PID:4528
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7624,i,4414298078349293099,7813812239863117932,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7636 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    PID:5808
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7760,i,12750394478311688160,7696321770636353185,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7772 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    PID:6088
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7780,i,5490203627207519574,14639385557455343386,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7800 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Enumerates system info in registry
                                    PID:5476
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7804,i,12458489204506573238,5730225228015217303,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8072 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    PID:5956
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8244,i,18195048868200142047,12094712868309934516,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=4560 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Enumerates system info in registry
                                    PID:4820
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5732,i,6521422190188165856,18170786299166468182,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8240 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Enumerates system info in registry
                                    PID:1052
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8476,i,16898358500987496553,3629863656883556570,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=6464 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Enumerates system info in registry
                                    PID:5432
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8260,i,14528553384460037662,11774447676239533579,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8520 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    PID:5968
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8744,i,10086919365513468045,14867187167484704028,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8784 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    PID:5984
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8776,i,10687906720667407101,4626382038893941177,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8808 /prefetch:14
                                    7⤵
                                    • Executes dropped EXE
                                    • Enumerates system info in registry
                                    PID:6004
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8812,i,16452403252549501374,12336388180823571118,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9156 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:6676
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9744,i,17986299600954619612,2817720104877085039,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9752 /prefetch:9
                                    7⤵
                                      PID:6668
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=9720,i,1916133745831386540,10757321453159223354,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9900 /prefetch:14
                                      7⤵
                                        PID:7036
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=10044,i,16102097497673604788,17154755848840000635,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10032 /prefetch:14
                                        7⤵
                                          PID:7196
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:7792
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff7fb7a9860,0x7ff7fb7a986c,0x7ff7fb7a9878
                                            8⤵
                                              PID:8060
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=3244,i,1862897761100464598,101921374962897993,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=3308 /prefetch:1
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:6192
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3668,i,15858899029360015789,2197767671350092815,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=3656 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:7180
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3632,i,2701425910587762474,10043539114095187940,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10396 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:7220
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=10552,i,1547620569752395059,11089277244372056104,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10564 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:7424
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=10208,i,7338299292988999889,11404761007258569614,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10036 /prefetch:14
                                            7⤵
                                              PID:3020
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=10616,i,10173000511180716511,12963252682807640635,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=10092 /prefetch:14
                                              7⤵
                                                PID:7844
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5632,i,6964068180306113786,5823032472271223910,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=9952 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:1388
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=10640,i,7124639577864927666,12945663908476032860,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=3644 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:7244
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=10556,i,10739171644600304054,1966135580674832513,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=10608 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:7416
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=6620,i,6249205767464444407,17209428644744593555,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=5596 /prefetch:14
                                                7⤵
                                                  PID:5692
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7492,i,17831835667869150705,9322984019918690189,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=10684 /prefetch:14
                                                  7⤵
                                                    PID:6776
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8048,i,6924097505275581374,8077407492091184856,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9164 /prefetch:14
                                                    7⤵
                                                      PID:6844
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8800,i,8599369704925935353,17025243360487641876,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8924 /prefetch:14
                                                      7⤵
                                                        PID:7032
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=9228,i,11250844138787309227,12399809038115154339,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=7572 /prefetch:14
                                                        7⤵
                                                          PID:7752
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=7680,i,549724281139219555,10847566266547319409,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=7628 /prefetch:9
                                                          7⤵
                                                            PID:6080
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7832,i,4458378763142397553,7249137741223286168,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=7900 /prefetch:14
                                                            7⤵
                                                            • Enumerates system info in registry
                                                            PID:6176
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8472,i,3340872801564802995,1871234900480029007,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=8436 /prefetch:14
                                                            7⤵
                                                              PID:5188
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8412,i,8137676983102436159,13642110766050486056,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8296 /prefetch:14
                                                              7⤵
                                                              • Enumerates system info in registry
                                                              PID:7508
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=5460,i,15974390736279997903,6827617615244532964,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8164 /prefetch:9
                                                              7⤵
                                                                PID:8016
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=8076,i,14794857979260487248,7557766537118490196,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=5420 /prefetch:9
                                                                7⤵
                                                                • Enumerates system info in registry
                                                                PID:4812
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=5924,i,18401278398563054877,484353300129697703,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=5780 /prefetch:9
                                                                7⤵
                                                                  PID:5428
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7712,i,11836928897287522035,1988733513520210215,524288 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=5884 /prefetch:14
                                                                  7⤵
                                                                  • Enumerates system info in registry
                                                                  PID:1888
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=3900,i,5496698578247228572,17248775159217023161,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=3896 /prefetch:9
                                                                  7⤵
                                                                  • Enumerates system info in registry
                                                                  PID:5832
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=6956,i,8588644558148573165,14785590754746596375,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=6988 /prefetch:9
                                                                  7⤵
                                                                    PID:6272
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=5796,i,1257097027953869386,12951941192853480437,2097152 --field-trial-handle=1836,i,11976736230682816112,4257678577647594294,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1840,i,16586444658299148228,14577779430133994176,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=5784 /prefetch:9
                                                                    7⤵
                                                                    • Enumerates system info in registry
                                                                    PID:7276
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --edition=std-2 --host=https://autoupdate.opera.com/ --installationdatadir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --installdir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --lang=en-US --pipeid --producttype --requesttype=shutdown --version=133.0.5932.39 --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --firstrunver=133.0.5932.39 --firstrunts=1784384440 --consent-info=eyJzdGF0aXN0aWNzX2NvbGxlY3Rpb25fZW5hYmxlZCI6dHJ1ZSwidXNlcl9leHBlcmllbmNlX21ldHJpY3NfcmVwb3J0aW5nX2VuYWJsZWQiOnRydWV9
                                                                    7⤵
                                                                      PID:4368
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff7fb7a9860,0x7ff7fb7a986c,0x7ff7fb7a9878
                                                                        8⤵
                                                                          PID:2396
                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"
                                                                  4⤵
                                                                  • Executes dropped EXE
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:960
                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\assistant\assistant_installer.exe
                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\assistant\assistant_installer.exe" --version
                                                                  4⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • System Location Discovery: System Language Discovery
                                                                  • Suspicious use of WriteProcessMemory
                                                                  PID:1100
                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\assistant\assistant_installer.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x1144b80,0x1144b8c,0x1144b98
                                                                    5⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • System Location Discovery: System Language Discovery
                                                                    PID:2116
                                                          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                            1⤵
                                                              PID:1912
                                                            • C:\Windows\system32\svchost.exe
                                                              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                              1⤵
                                                                PID:1424
                                                              • C:\Windows\system32\wbem\unsecapp.exe
                                                                C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                1⤵
                                                                  PID:5196
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                                  1⤵
                                                                  • Enumerates system info in registry
                                                                  PID:7916
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x280,0x284,0x288,0x218,0x28c,0x7ff7fb7a9860,0x7ff7fb7a986c,0x7ff7fb7a9878
                                                                    2⤵
                                                                      PID:6840
                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
                                                                      2⤵
                                                                        PID:3736
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                                      1⤵
                                                                        PID:6244
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffae56f05a0,0x7ffae56f05b0,0x7ffae56f05c0
                                                                          2⤵
                                                                            PID:6300
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"
                                                                          1⤵
                                                                          • Adds Run key to start application
                                                                          • Checks processor information in registry
                                                                          • Enumerates system info in registry
                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                          • Suspicious use of SendNotifyMessage
                                                                          PID:6000
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffae56f05a0,0x7ffae56f05b0,0x7ffae56f05c0
                                                                            2⤵
                                                                              PID:5928
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=1872,i,16175693294822937023,1233753456031379057,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1996 /prefetch:11
                                                                              2⤵
                                                                              • System Time Discovery
                                                                              PID:8092
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1648,i,4730068059831471479,13426812138676592285,262144 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1960 /prefetch:2
                                                                              2⤵
                                                                                PID:8096
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=2404,i,13053350378889386395,3191697049302087216,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2416 /prefetch:13
                                                                                2⤵
                                                                                • Enumerates system info in registry
                                                                                PID:7620
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3172,i,5853378232291577030,11440806341706396147,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3188 /prefetch:14
                                                                                2⤵
                                                                                  PID:6624
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3324,i,360593285894458987,15226530808091708189,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3400 /prefetch:14
                                                                                  2⤵
                                                                                    PID:5272
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3368,i,12403794394331068643,10966328838108800131,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3444 /prefetch:14
                                                                                    2⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:5304
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3344,i,17094838172142573719,3748680499065135432,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3420 /prefetch:14
                                                                                    2⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:3128
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3272,i,5794934462250289979,10842838123149313881,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3336 /prefetch:14
                                                                                    2⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:8004
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=3304,i,3182711989674716730,11982936729240934228,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3376 /prefetch:14
                                                                                    2⤵
                                                                                      PID:6256
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3576,i,4452866931301480230,14489081774661922311,2097152 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4148 /prefetch:9
                                                                                      2⤵
                                                                                        PID:8136
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3868,i,5982490868608325661,16948490469419320919,2097152 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4188 /prefetch:9
                                                                                        2⤵
                                                                                          PID:6376
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4160,i,11571038840694513858,8185153642839475723,2097152 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4208 /prefetch:9
                                                                                          2⤵
                                                                                            PID:6340
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4264,i,1118616031357012164,5001475138827045808,2097152 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4340 /prefetch:9
                                                                                            2⤵
                                                                                            • Enumerates system info in registry
                                                                                            PID:5744
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4520,i,10596197365392897257,6945624898690808394,2097152 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5048 /prefetch:9
                                                                                            2⤵
                                                                                              PID:7008
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5312,i,13380126375856881318,17554931659711935761,2097152 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5328 /prefetch:1
                                                                                              2⤵
                                                                                              • Enumerates system info in registry
                                                                                              PID:7124
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5540,i,5002814779053310186,16926237482254258476,2097152 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5568 /prefetch:9
                                                                                              2⤵
                                                                                              • Enumerates system info in registry
                                                                                              PID:336
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5720,i,3383335259137960702,1845736989625724338,2097152 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5732 /prefetch:1
                                                                                              2⤵
                                                                                              • Enumerates system info in registry
                                                                                              PID:6476
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5936,i,9159092569930692283,12748043742143667749,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=5956 /prefetch:14
                                                                                              2⤵
                                                                                              • Enumerates system info in registry
                                                                                              PID:1816
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5944,i,15152309623851907974,9402103507960648419,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5960 /prefetch:14
                                                                                              2⤵
                                                                                              • Enumerates system info in registry
                                                                                              PID:3288
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5948,i,627994694073426648,7865184469815956656,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5968 /prefetch:14
                                                                                              2⤵
                                                                                                PID:4532
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=5952,i,1136149360429459693,3788848437401555608,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=5980 /prefetch:14
                                                                                                2⤵
                                                                                                  PID:6520
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=7012,i,5875490643976883334,2992577398134332992,2097152 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7028 /prefetch:9
                                                                                                  2⤵
                                                                                                    PID:2160
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3560,i,15079285374316032544,17072789355905644964,2097152 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=7284 /prefetch:9
                                                                                                    2⤵
                                                                                                      PID:7228
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7572,i,14944456781691265387,16234014226300618624,2097152 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7536 /prefetch:9
                                                                                                      2⤵
                                                                                                      • Enumerates system info in registry
                                                                                                      PID:6892
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7272,i,3559115495982318463,9160031895142741978,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=5536 /prefetch:12
                                                                                                      2⤵
                                                                                                      • Enumerates system info in registry
                                                                                                      PID:3092
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=7832,i,12130310383622038670,2390065982109933739,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7804 /prefetch:14
                                                                                                      2⤵
                                                                                                        PID:2136
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8108,i,1589060794166265009,2490892853394613975,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8092 /prefetch:14
                                                                                                        2⤵
                                                                                                          PID:3904
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=8164,i,1989282697655682915,2098260878282759043,2097152 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8160 /prefetch:1
                                                                                                          2⤵
                                                                                                          • Enumerates system info in registry
                                                                                                          PID:7420
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                                                                                                          2⤵
                                                                                                            PID:4512
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff7fb7a9860,0x7ff7fb7a986c,0x7ff7fb7a9878
                                                                                                              3⤵
                                                                                                                PID:2224
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8852,i,17218407709149033936,8349138209798346990,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8864 /prefetch:14
                                                                                                              2⤵
                                                                                                              • Enumerates system info in registry
                                                                                                              PID:5784
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --metrics-shmem-handle=8872,i,2241556779307587347,12432889138828327401,524288 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=9004 /prefetch:14
                                                                                                              2⤵
                                                                                                                PID:1004
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest10-ref:DNA-99214_GXCTest10 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=4056,i,7289830113898670262,7839564435602355899,2097152 --field-trial-handle=1964,i,9686832019533307329,17774999245576799286,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1968,i,15728420256699264092,1234525715690035839,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=4088 /prefetch:9
                                                                                                                2⤵
                                                                                                                • Enumerates system info in registry
                                                                                                                PID:4328
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --edition=std-2 --host=https://autoupdate.opera.com/ --installationdatadir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --installdir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --lang=en-US --pipeid --producttype --requesttype=shutdown --version=133.0.5932.39 --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --firstrunver=133.0.5932.39 --firstrunts=1784384440 --consent-info=eyJzdGF0aXN0aWNzX2NvbGxlY3Rpb25fZW5hYmxlZCI6dHJ1ZSwidXNlcl9leHBlcmllbmNlX21ldHJpY3NfcmVwb3J0aW5nX2VuYWJsZWQiOnRydWV9
                                                                                                                2⤵
                                                                                                                • Enumerates system info in registry
                                                                                                                PID:5532
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff7fb7a9860,0x7ff7fb7a986c,0x7ff7fb7a9878
                                                                                                                  3⤵
                                                                                                                    PID:7708
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                                                                                1⤵
                                                                                                                  PID:1044
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x280,0x284,0x288,0x218,0x28c,0x7ff7fb7a9860,0x7ff7fb7a986c,0x7ff7fb7a9878
                                                                                                                    2⤵
                                                                                                                      PID:2556

                                                                                                                  Network

                                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                                        Reconnaissance

                                                                                                                        Resource Development

                                                                                                                        Initial Access

                                                                                                                        Execution

                                                                                                                        Persistence

                                                                                                                        Boot or Logon Autostart Execution

                                                                                                                        1
                                                                                                                        T1547

                                                                                                                        Registry Run Keys / Startup Folder

                                                                                                                        1
                                                                                                                        T1547.001

                                                                                                                        Event Triggered Execution

                                                                                                                        1
                                                                                                                        T1546

                                                                                                                        Component Object Model Hijacking

                                                                                                                        1
                                                                                                                        T1546.015

                                                                                                                        Privilege Escalation

                                                                                                                        Boot or Logon Autostart Execution

                                                                                                                        1
                                                                                                                        T1547

                                                                                                                        Registry Run Keys / Startup Folder

                                                                                                                        1
                                                                                                                        T1547.001

                                                                                                                        Event Triggered Execution

                                                                                                                        1
                                                                                                                        T1546

                                                                                                                        Component Object Model Hijacking

                                                                                                                        1
                                                                                                                        T1546.015

                                                                                                                        Defense Evasion

                                                                                                                        Modify Registry

                                                                                                                        3
                                                                                                                        T1112

                                                                                                                        Subvert Trust Controls

                                                                                                                        2
                                                                                                                        T1553

                                                                                                                        Install Root Certificate

                                                                                                                        1
                                                                                                                        T1553.004

                                                                                                                        SIP and Trust Provider Hijacking

                                                                                                                        1
                                                                                                                        T1553.003

                                                                                                                        Credential Access

                                                                                                                        Credentials from Password Stores

                                                                                                                        1
                                                                                                                        T1555

                                                                                                                        Credentials from Web Browsers

                                                                                                                        1
                                                                                                                        T1555.003

                                                                                                                        Unsecured Credentials

                                                                                                                        1
                                                                                                                        T1552

                                                                                                                        Credentials In Files

                                                                                                                        1
                                                                                                                        T1552.001

                                                                                                                        Discovery

                                                                                                                        Browser Information Discovery

                                                                                                                        1
                                                                                                                        T1217

                                                                                                                        Peripheral Device Discovery

                                                                                                                        1
                                                                                                                        T1120

                                                                                                                        Query Registry

                                                                                                                        5
                                                                                                                        T1012

                                                                                                                        System Information Discovery

                                                                                                                        4
                                                                                                                        T1082

                                                                                                                        System Location Discovery

                                                                                                                        1
                                                                                                                        T1614

                                                                                                                        System Language Discovery

                                                                                                                        1
                                                                                                                        T1614.001

                                                                                                                        System Time Discovery

                                                                                                                        1
                                                                                                                        T1124

                                                                                                                        Lateral Movement

                                                                                                                        Collection

                                                                                                                        Data from Local System

                                                                                                                        1
                                                                                                                        T1005

                                                                                                                        Command and Control

                                                                                                                        Exfiltration

                                                                                                                        Impact

                                                                                                                        Replay Monitor

                                                                                                                        Loading Replay Monitor...

                                                                                                                        Downloads

                                                                                                                        698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
                                                                                                                        • Size 471B
                                                                                                                        • SHA256 2e769b34ffd5540c6885160673f858a026f5c1a6e4e4c49615ec7704d82ee2b0
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        8EC9B1D0ABBD7F98B401D425828828CE_718D2C329F626ED7D76DEFF7D03D3C6D
                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_718D2C329F626ED7D76DEFF7D03D3C6D
                                                                                                                        • Size 727B
                                                                                                                        • SHA256 bbfb123be7dad0dc58a6be39f69c167f6470b240cbaabea2eb09a0cf19f7baa9
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
                                                                                                                        • Size 727B
                                                                                                                        • SHA256 26d42c2b3b04ffe668fffa890fdeb2280ad907559e8aea30c7796a045b20d6db
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
                                                                                                                        • Size 400B
                                                                                                                        • SHA256 6545bc5754379803559f4dd51c70bddfc219187f9ed28de6075c46c73a34e8a3
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        8EC9B1D0ABBD7F98B401D425828828CE_718D2C329F626ED7D76DEFF7D03D3C6D
                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_718D2C329F626ED7D76DEFF7D03D3C6D
                                                                                                                        • Size 404B
                                                                                                                        • SHA256 ddce7d4e0afebf7dbdef3a4c67ed56f286b751c043ff1ad01e8e80d7af9d4a35
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
                                                                                                                        • Size 412B
                                                                                                                        • SHA256 2387f84e05ccf7b157b3456fb71586c777d73a71fdd0a3fa54fe59e26ac9b038
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        4468da11-0df0-4f7a-bb89-641616744f0e.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\4468da11-0df0-4f7a-bb89-641616744f0e.tmp
                                                                                                                        • Size 116KB
                                                                                                                        • SHA256 e6c4f3e495b2cb6a6270a5b029c7a4feb6b9257a85595bbce3ac653bfc0d078e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        BookmarkMergedSurfaceOrdering
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                        • Size 6B
                                                                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                        Submit Download

                                                                                                                        BrowsingTopicsState
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                        • Size 414B
                                                                                                                        • SHA256 239100950a4f5186b221bf473cff0bc4d4e02969af7f31384fb0bc3b3940c548
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        the-real-index
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 8a692b5acfa1be75524d42f18aec204981340f03cc172903b1ae94801d6254eb
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        Network Persistent State
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                        • Size 6KB
                                                                                                                        • SHA256 706a308e290b562265f4e108a4396d9bd5b102ead7a82416cbe03425fc254b31
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        SCT Auditing Pending Reports
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                        • Size 2B
                                                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                        Submit Download

                                                                                                                        TransportSecurity
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 796796c4753c884e0debc174a2b2bc09584d5a9156818de20a936b872fb63c72
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        Preferences
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 d8f51a6bbb9bd3703a9fb336695ef22752b331a110fa07b1643165cd2c124960
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        Secure Preferences
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                        • Size 17KB
                                                                                                                        • SHA256 86a708718cf15f4439caa697f6058448e2b7016cb1cef9cd2e54315587d87208
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        the-real-index
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                        • Size 120B
                                                                                                                        • SHA256 2beb3c97db55357b56aab502db22452cb4d4c04a58ad94a73bc13a4c822b86e9
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        the-real-index~RFe585b79.TMP
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585b79.TMP
                                                                                                                        • Size 96B
                                                                                                                        • SHA256 9df80929a2ffcd966b4624fa698966c5a8f317136265e26b5c73f4ec58a881ad
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        Local State
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                        • Size 116KB
                                                                                                                        • SHA256 8c5d33404601fc06246a948c25892099964602dff25cb9d449421265a726466a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        Local State
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                        • Size 115KB
                                                                                                                        • SHA256 6ac22f043a06aec972d12e38157e2b7a2823f77a5167ac75bd819c21a5cfddfe
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        data_1
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
                                                                                                                        • Size 264KB
                                                                                                                        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                        Submit Download

                                                                                                                        f_000001
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\Cache\Cache_Data\f_000001
                                                                                                                        • Size 54KB
                                                                                                                        • SHA256 79a84d79be2cdf4baa1a6d14a411819d8ae7195881cfc657f11b01152a9da916
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        133.0.5932.39.manifest
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\133.0.5932.39.manifest
                                                                                                                        • Size 225B
                                                                                                                        • SHA256 0f5ab8c7090e4b3da7db456cbb8993121060d5e172f58c757f9771cbef70b87b
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        150x150Logo.scale-100.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-100.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        150x150Logo.scale-100_contrast-white.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        150x150Logo.scale-140.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-140.png
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        150x150Logo.scale-140_contrast-white.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        150x150Logo.scale-180.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-180.png
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        150x150Logo.scale-180_contrast-white.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        150x150Logo.scale-80.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-80.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        150x150Logo.scale-80_contrast-white.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        70x70Logo.scale-100.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-100.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        70x70Logo.scale-100_contrast-white.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        70x70Logo.scale-140.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-140.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        70x70Logo.scale-140_contrast-white.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        70x70Logo.scale-180.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-180.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        70x70Logo.scale-180_contrast-white.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        70x70Logo.scale-80.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-80.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        70x70Logo.scale-80_contrast-white.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                                                        • Size 901B
                                                                                                                        • SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        CChromaEditorLibrary64.dll
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\CChromaEditorLibrary64.dll
                                                                                                                        • Size 145KB
                                                                                                                        • SHA256 c5d430fee063f94180d881a44783ed9d54089543118ddfa53dbb0672c1d73e03
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        CUESDK.x64_2017.dll
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\CUESDK.x64_2017.dll
                                                                                                                        • Size 474KB
                                                                                                                        • SHA256 baff2dbbc95e036a50bda7034ee76d2ee2e9d8cc258040d567fdf8aafd29e2cf
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        assistant_package
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\assistant_package
                                                                                                                        • Size 3.6MB
                                                                                                                        • SHA256 5a68392ec016acfc72ec4e168ec0f07f2b997a7556ab648d2ed6f7c99d4203ea
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        d3dcompiler_47.dll
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\d3dcompiler_47.dll
                                                                                                                        • Size 4.5MB
                                                                                                                        • SHA256 c7c5921bc41acf70de9aa6f131eb70b97456c7fdc82b8459d4715155289b6658
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        dxcompiler.dll
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\dxcompiler.dll
                                                                                                                        • Size 24.4MB
                                                                                                                        • SHA256 4e48e8f909cce057529e3aac4b82555c6950484eae9c00772d4366dfbf91fce1
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        installer.exe
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe
                                                                                                                        • Size 9.1MB
                                                                                                                        • SHA256 75d337be6e3e09f8186fea427928e6cdced8249f1cda03cd823c2de715f446b2
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        custom_partner_content.json
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\resources\custom_partner_content.json
                                                                                                                        • Size 245KB
                                                                                                                        • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        browser_assistant.exe
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                                                                                        • Size 5.2MB
                                                                                                                        • SHA256 4a5fd953fd0e1c3085ae68fa3984083b6273b2fecad4cbd5149f9b20a720e7e5
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        opera_autoupdate.exe
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                        • Size 7.3MB
                                                                                                                        • SHA256 e974158b7bf3166c34803ca17e1ccb9aeff1570ef8101e4d3332a3b59803df11
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        installer_prefs.json
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 e789b3d2aaf8017e66c359e972d0451e3818271f21d8ab8541fcb1b62de92f6a
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        opera.exe
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                        • Size 2.9MB
                                                                                                                        • SHA256 190bce68035b2b7790b66732ed9e19b114d10e7c8edf43d6903ffa65b8f9ccbd
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        Opera GX Browser.lnk
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\Opera GX Browser.lnk
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 beb87be5fee4f5da73aa84496193c50f9c19013868cdf0ef8d464fe1cb99e950
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
                                                                                                                        • Size 2.8MB
                                                                                                                        • SHA256 0f50bda78a34e09ccfd5e33a7958de9eebe9863cc3d875e8b9c52dec3f3a9992
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        assistant_installer.exe
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\assistant\assistant_installer.exe
                                                                                                                        • Size 2.5MB
                                                                                                                        • SHA256 e86907d20a18c6b99e270a4422e0c279079e8a118b6bd7fbb4001161ddc881f4
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        dbgcore.dll
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\assistant\dbgcore.dll
                                                                                                                        • Size 196KB
                                                                                                                        • SHA256 a2777992696c953c001dabade3f236f731987b58061efd8c894815f9939f979c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        dbghelp.dll
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\assistant\dbghelp.dll
                                                                                                                        • Size 1.8MB
                                                                                                                        • SHA256 102419e70ed462dd1ef4a30d94b714c4317ea838d7acc85ae030dfca19f609ab
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        installer_prefs_include.json
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\installer_prefs_include.json
                                                                                                                        • Size 796B
                                                                                                                        • SHA256 eaef5140ea29199d280d59e2a357ec31320615e5abb3460cd20cd5be393bd83b
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        installer_prefs_include.json
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\installer_prefs_include.json
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 6e49fb267c4b14e441d5a55a5e037d953d5dc52d8536e64fe6aa60073067cd1f
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        installer_prefs_include.json.backup
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\481441c3-f2cb-4044-8cd5-0ce5c5e2f5fd Opera GX Installer Temp\opera_package_202607181519531\installer_prefs_include.json.backup
                                                                                                                        • Size 781B
                                                                                                                        • SHA256 a0e1e724cea9c640560e62f991e17a5e5ddbf4321ea9c7145b9f878c59ea0b0e
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        14ce19fc-193f-4251-819f-bfb9cd4ca550.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\14ce19fc-193f-4251-819f-bfb9cd4ca550.tmp
                                                                                                                        • Size 4KB
                                                                                                                        • SHA256 7fdd2937785f48c5518e4cccf5027096f1378046a5cb4e7443819cd6bd2f398b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        installer.exe
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS49113808\installer.exe
                                                                                                                        • Size 9.1MB
                                                                                                                        • SHA256 89317570d2f475fcd42f1ec82b895c2f27bf58afd357832c8c8b4ad0a5e48e0c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        b0395b57-7ef4-477f-a6d2-f69e7c9af462.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1692_1098729191\b0395b57-7ef4-477f-a6d2-f69e7c9af462.tmp
                                                                                                                        • Size 472KB
                                                                                                                        • SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        4ad00dcf-e896-4f21-b728-f77c6811e65d.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1692_1961376879\4ad00dcf-e896-4f21-b728-f77c6811e65d.tmp
                                                                                                                        • Size 2.6MB
                                                                                                                        • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        Icon_Light_Neutral.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1692_1961376879\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        97e90f42-de07-4786-bea4-e6ecf495e23d.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1692_2140567499\97e90f42-de07-4786-bea4-e6ecf495e23d.tmp
                                                                                                                        • Size 4.2MB
                                                                                                                        • SHA256 d2781f323a4260a096e545d31b4fd5ed4f9316eda21e430202d806a6ca16e432
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        favicon_opera_one.png
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1692_2140567499\CRX_INSTALL\favicon_opera_one.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        5449a9c4-1406-4348-bfcb-36efeb28dcfc.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1692_490692809\5449a9c4-1406-4348-bfcb-36efeb28dcfc.tmp
                                                                                                                        • Size 45KB
                                                                                                                        • SHA256 c943858b3c313af47b70a38e46a36e5f2ac9f177334384702359c186ccfd9c52
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        1b4165bf-7ced-4162-9388-3d5a313743cc.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1692_655841018\1b4165bf-7ced-4162-9388-3d5a313743cc.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 f1d24a67ce5aa49b3a6a207a0c49c636f0a5b4851ce493326c76a0b78eb7c545
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        Opera GX Browser.lnk
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera GX Browser.lnk
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 3278ddb6844c4cc867120228b7be9dd64bf9b58e78573f36b4304d209d0c3e40
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        2WO1KJDKIVLJK9D21VOI.temp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2WO1KJDKIVLJK9D21VOI.temp
                                                                                                                        • Size 23KB
                                                                                                                        • SHA256 ac6d49cf6d9807746ba1c1ae7aa13b36700357c00e0e8d0a7abc7a590efee3a0
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        314e6d699791604a.customDestinations-ms
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\314e6d699791604a.customDestinations-ms
                                                                                                                        • Size 22KB
                                                                                                                        • SHA256 41239d3932781e586105bf79eb907824db8c0d013ad2ff85c4689cf5d8d67f51
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        048c6df9-51e8-410a-8c0a-bc52e81418c5.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\048c6df9-51e8-410a-8c0a-bc52e81418c5.tmp
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 f4643e18b58d989be6106c333666526926772cc23a43fa9ebcd34c60adbdc831
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        settings.dat
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                                                        • Size 40B
                                                                                                                        • SHA256 951a835d6e28af694c7accf923bd84f4d5003a60bdffeaa35c7263186597a474
                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                        Submit Download

                                                                                                                        2a6790b9-e85b-4532-aa1e-ea6f8ed51aba.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\2a6790b9-e85b-4532-aa1e-ea6f8ed51aba.tmp
                                                                                                                        • Size 198B
                                                                                                                        • SHA256 f5b0141d3b9e18e0e6fc571f64160f5dbc883566c5044e81d7731fc6086d6c8b
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        3bb2760c-667c-4b21-8d19-396db8270be1.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\3bb2760c-667c-4b21-8d19-396db8270be1.tmp
                                                                                                                        • Size 162KB
                                                                                                                        • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        4928acdb-5153-4dc1-9930-eb40e73b771d.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\4928acdb-5153-4dc1-9930-eb40e73b771d.tmp
                                                                                                                        • Size 171B
                                                                                                                        • SHA256 9da39ac16813e165d43ca656bdcd387180d4fb20aaa278e96a3d0a1439073480
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        52fe67f0-96ce-45bc-b3f6-f38818fb4eed.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\52fe67f0-96ce-45bc-b3f6-f38818fb4eed.tmp
                                                                                                                        • Size 303B
                                                                                                                        • SHA256 5ee5ed9adb2b53b07c0ec02a067df3b8d67647d09c06a782ea99f90717530084
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        53a0e15d-fd2a-4886-88f4-9874f8b8d20e.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\53a0e15d-fd2a-4886-88f4-9874f8b8d20e.tmp
                                                                                                                        • Size 85KB
                                                                                                                        • SHA256 355b4003dc71022d675e2db8d03352c03847eb7577cb5f86edb2f33cba746b3c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        59612d3a-d959-42b9-8094-290416fcecd9.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\59612d3a-d959-42b9-8094-290416fcecd9.tmp
                                                                                                                        • Size 171B
                                                                                                                        • SHA256 ae0c42135dc65e3752253593a2362da036d04e7454ed55483b5601d64a6a2d4b
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        7c4c5f2f-ddb7-4290-bcec-0bc915de967a.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\7c4c5f2f-ddb7-4290-bcec-0bc915de967a.tmp
                                                                                                                        • Size 412B
                                                                                                                        • SHA256 ae5f53164de3f04eae7afd7df54bdbc3410c7b3d1140dc0afb8bc7fc87dfc67d
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        848b2f53-0510-4bd3-baa1-90c0f44fae91.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\848b2f53-0510-4bd3-baa1-90c0f44fae91.tmp
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 074a1c5600256a44e6b7cebd9434a132030e883a30d950fdd4216273ef38943e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        the-real-index
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                        • Size 48B
                                                                                                                        • SHA256 1a02d445106dd4b05480d655b728da826bb7fd3734ec8a863690e16d43e0df1f
                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                        Submit Download

                                                                                                                        the-real-index
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 b5bf914d24a7d1a53b8ba80793d978ac307bb24c94589c3ea14629a078af52e9
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        the-real-index
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 960ea919ffa6ab5fa94695e2791781d7615921d8bf060a6a3da6bf2ecbf7dca1
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        settings.dat
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports\settings.dat
                                                                                                                        • Size 40B
                                                                                                                        • SHA256 d61caa1c69b75091f266d26f6192984dad5e4202d08018fdabd09f2947f75e53
                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                        Submit Download

                                                                                                                        MANIFEST-000001
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
                                                                                                                        • Size 41B
                                                                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                        Submit Download

                                                                                                                        messages.json
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        background.js
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
                                                                                                                        • Size 17KB
                                                                                                                        • SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        twitch16.png
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
                                                                                                                        • Size 370B
                                                                                                                        • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        twitch48.png
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
                                                                                                                        • Size 921B
                                                                                                                        • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        cos-bridge.js
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-bridge.js
                                                                                                                        • Size 173B
                                                                                                                        • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        cos-content.js
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-content.js
                                                                                                                        • Size 502B
                                                                                                                        • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        main.js
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\main.js
                                                                                                                        • Size 47KB
                                                                                                                        • SHA256 4c2cc909a2d1ca6b84270a6329e81f0f1de229ce49fd9412033a5c45e1d2e72f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        logo_128.png
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_128.png
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        logo_16.png
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_16.png
                                                                                                                        • Size 653B
                                                                                                                        • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        logo_32.png
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_32.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        logo_48.png
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_48.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        logo_64.png
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_64.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        service-worker-loader.js
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\service-worker-loader.js
                                                                                                                        • Size 49B
                                                                                                                        • SHA256 4409861989b435ae91707e5c01965f2a6b00d0822da0bcbf6e8a6d1a8df6fc2d
                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                        Submit Download

                                                                                                                        favicon_opera_one.png
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.53_0\favicon_opera_one.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        reader_mode.js
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.53_0\reader_mode.js
                                                                                                                        • Size 112KB
                                                                                                                        • SHA256 420f0010b0bbce8d98146b22c207b5f4425208ad5b6ddf4cbf7640529eacb8e5
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        service_worker.js
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.53_0\service_worker.js
                                                                                                                        • Size 74KB
                                                                                                                        • SHA256 d9bf1859f3da41c3bdd7ec89bf05711a0f64d6ed14644d5bb37e0ef6d4736d6a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        spotify_frame_interceptor.js
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.53_0\spotify_frame_interceptor.js
                                                                                                                        • Size 5KB
                                                                                                                        • SHA256 e649bcf734e3946ab006c1f0d4c28760513b7385039fd4bc0ac7f09c3dc41951
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        background.js
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                                                                        • Size 86KB
                                                                                                                        • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        Icon_Light_Neutral.png
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        popup.js.LICENSE.txt
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        rules.json
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                                                                                                        • Size 839B
                                                                                                                        • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        000003.log
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\000003.log
                                                                                                                        • Size 40KB
                                                                                                                        • SHA256 ca1ca1493868a89db4652fee890c422ecb6b9b1944f996e1bc47edc7f259bb88
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        MANIFEST-000001
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                        • Size 23B
                                                                                                                        • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                        Submit Download

                                                                                                                        0218a856-65b5-4ec2-a699-0d4f2e9c4de4.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\0218a856-65b5-4ec2-a699-0d4f2e9c4de4.tmp
                                                                                                                        • Size 27KB
                                                                                                                        • SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        2b0d0a91-9df6-4529-9c32-d7451b5064b4.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\2b0d0a91-9df6-4529-9c32-d7451b5064b4.tmp
                                                                                                                        • Size 27KB
                                                                                                                        • SHA256 68c23af61ff2bbdb2e2eff18776c62cf64ed6ce0a9a12d1def8a2c884d09132c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        6c2d6186-f508-4281-a7ed-af3989579a10.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\6c2d6186-f508-4281-a7ed-af3989579a10.tmp
                                                                                                                        • Size 27KB
                                                                                                                        • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        9847a882-1aff-4d94-a235-53088190f64d.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\9847a882-1aff-4d94-a235-53088190f64d.tmp
                                                                                                                        • Size 27KB
                                                                                                                        • SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        c9710957-b375-4424-b80f-232ed78cb3c6.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\c9710957-b375-4424-b80f-232ed78cb3c6.tmp
                                                                                                                        • Size 27KB
                                                                                                                        • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        e8a16c9e-dfb2-45de-9be3-c75d50495f3a.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\e8a16c9e-dfb2-45de-9be3-c75d50495f3a.tmp
                                                                                                                        • Size 27KB
                                                                                                                        • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        Network Persistent State
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                                                                                                        • Size 4KB
                                                                                                                        • SHA256 da961758bed428540ecac2f7a3a6fe251a4badc9c3fcb23b12397ae589ea45d7
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        Network Persistent State
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                                                                                                        • Size 4KB
                                                                                                                        • SHA256 324963058b05b46447378dfec7da9d214a2c5e9200ecd54123eb5e7cc18df0d3
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        TransportSecurity
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\TransportSecurity
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 67fbddb9ada7395ed60879c23df335ba3e45ac12b77d8d794d08697fbad2809f
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        dbfabde4-0ada-47cf-862d-ce7cf5af2750.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\dbfabde4-0ada-47cf-862d-ce7cf5af2750.tmp
                                                                                                                        • Size 59B
                                                                                                                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        Preferences
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                        • Size 16KB
                                                                                                                        • SHA256 c4cedd52068ac990820ad85f79398b9b66285b590f380c51257e4628a66ae3aa
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        Preferences
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 2bed5af351aea968d77fc4934a13bacec51ae3da3a2b5a781509cbe38f0b351a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        Preferences
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                        • Size 16KB
                                                                                                                        • SHA256 57c4c2a7041b5b85264ee0c5d90d54044c94fdfee90f9a0259818159e4e26fc9
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        Secure Preferences
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                                                                        • Size 118KB
                                                                                                                        • SHA256 b3026df622bfec4537262c03527fe3708856affec3c75a33fe656d4abf80be8c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        93598b40-3bea-4d13-9c22-c088b921e426.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\93598b40-3bea-4d13-9c22-c088b921e426.tmp
                                                                                                                        • Size 141B
                                                                                                                        • SHA256 09435f3f415a04f261615bd4bce869ffc77119ab7b8051c63bc20ab5ae32c8f8
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        index
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\add27933-1a7d-402e-9c28-bb6833a8a9d2\index
                                                                                                                        • Size 24B
                                                                                                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                        Submit Download

                                                                                                                        44ee017c-49b6-4a04-b7f8-5e951e0f4fc0.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\add27933-1a7d-402e-9c28-bb6833a8a9d2\index-dir\44ee017c-49b6-4a04-b7f8-5e951e0f4fc0.tmp
                                                                                                                        • Size 48B
                                                                                                                        • SHA256 013d9cc2360e8af9430e483d2fd2f4b69c9f120c9e0bddf029779d80d60eb634
                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                        Submit Download

                                                                                                                        the-real-index
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\add27933-1a7d-402e-9c28-bb6833a8a9d2\index-dir\the-real-index
                                                                                                                        • Size 168B
                                                                                                                        • SHA256 3ae7ea24e3e56a7d02165468b31c9cde1614037446be96b81a8a4592d4395114
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        the-real-index
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\add27933-1a7d-402e-9c28-bb6833a8a9d2\index-dir\the-real-index
                                                                                                                        • Size 216B
                                                                                                                        • SHA256 6db7242923b0a2a2a878fc6370cdfb00a219fe21aba9a94950b4487cb9fa495b
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        14429d26-e130-49b8-8706-d69b73c97adb.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\d95e5344-0294-406c-84aa-3c3bef891e82\index-dir\14429d26-e130-49b8-8706-d69b73c97adb.tmp
                                                                                                                        • Size 48B
                                                                                                                        • SHA256 ef349095021fb0b94313c1d4f7585b3038ce1319acb004801e7fffba4f82fd90
                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                        Submit Download

                                                                                                                        the-real-index
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\d95e5344-0294-406c-84aa-3c3bef891e82\index-dir\the-real-index
                                                                                                                        • Size 96B
                                                                                                                        • SHA256 7102fef4c3e71939c0d727d933c6ee2ae7eea44025bc6e0ab8b9226849bf0d07
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        b2cda268-2286-4b68-a50e-9504e2c1ce7d.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\fc0f66ae-5a79-4563-80fc-2bd83428c2ff\index-dir\b2cda268-2286-4b68-a50e-9504e2c1ce7d.tmp
                                                                                                                        • Size 48B
                                                                                                                        • SHA256 20e85c9998d5c4f3320a92b7a1a16937ebc38e400d72b3f16885c23260bca51d
                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                        Submit Download

                                                                                                                        the-real-index
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\fc0f66ae-5a79-4563-80fc-2bd83428c2ff\index-dir\the-real-index
                                                                                                                        • Size 72B
                                                                                                                        • SHA256 9ca115d0bbb9d3d33585df7aad005116657b7785b1906e3cecce91cf4d1a93f2
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        index.txt
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
                                                                                                                        • Size 287B
                                                                                                                        • SHA256 7802646350e0d58dffd6963aeedfc65401e826932692d7af8b9fcc171e8e3abe
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        index.txt
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
                                                                                                                        • Size 208B
                                                                                                                        • SHA256 d4f2ef9e405620be3e46311d2a2acd9c527fde9952da2928949e661fb40c0624
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        index.txt
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
                                                                                                                        • Size 203B
                                                                                                                        • SHA256 477c721b3687149a83f5365d8a50246d6228dacc34b7108759f4d5558bf5344e
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        index.txt
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
                                                                                                                        • Size 282B
                                                                                                                        • SHA256 9b3a16b5be766998c199795aa9b55b99eecf84cb69e13367b29f6168d78bb1be
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        6751653b-9710-4641-8a3a-db8a55daf070.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\6751653b-9710-4641-8a3a-db8a55daf070.tmp
                                                                                                                        • Size 72B
                                                                                                                        • SHA256 e662e9ba66b044a36d31d066ac78499dda4bad27d2e5404f2554a61b4086b69b
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        the-real-index
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                        • Size 528B
                                                                                                                        • SHA256 0104643306fe4d23f7e70a5d8385658a8f03065485bc79290e96bc6000f3a616
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        2ea1946f-0d1b-455f-b6d9-6c4a40b8bc7b.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\2ea1946f-0d1b-455f-b6d9-6c4a40b8bc7b.tmp
                                                                                                                        • Size 429B
                                                                                                                        • SHA256 b9890b4a3d266e2d183eec79d3a4c5e0da77cbb66e20ae6e42be334a1cc2d128
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        31166e2c-ed56-4fa2-9e0a-7fbbed147145.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\31166e2c-ed56-4fa2-9e0a-7fbbed147145.tmp
                                                                                                                        • Size 429B
                                                                                                                        • SHA256 277e1f2b0d98b564eb8c13b2f71ba243c58ace8d8f3adc46d904a24d4adb06c8
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        3a50091a-fd00-4532-89ea-35d3be145a1d.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\3a50091a-fd00-4532-89ea-35d3be145a1d.tmp
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 8506c2707f27431b3b7806ad23efae6dc726234d55021e730976a6c3e21db2f3
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        75cbdaae-723a-43d2-a0e9-e5bbf24fcb93.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\75cbdaae-723a-43d2-a0e9-e5bbf24fcb93.tmp
                                                                                                                        • Size 957B
                                                                                                                        • SHA256 b3846c64767f1f8e0510b00a25d4d34e8ce7d7c12a1acbaea0ca939fe7473f95
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 6KB
                                                                                                                        • SHA256 4cbf969a50b1a7394b29484fc72d3dc67314fe426f55ae002bec8d5a03483e2a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 6KB
                                                                                                                        • SHA256 3d0359c39f13da750c6c125a27556cad041180ede2d9b0eb867ad5bfe14656fa
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 f08d62117a7e021992a44c0b225bb011132dc7b56d0452985c19a30e45ab0388
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 753283a6830c4e28ce5ec9db52ca6ab062ead38865041aa9b991a4b30d360b51
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 e97a33b195576d1fc9e43134f44be4a1f3b89f97793e0f224aa73e8157b08fc3
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 e995f1132966cb507698cc0b80b2663689a2f504c9c346d4db558fdee7eef1af
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 78663bd4bf426ab1891a49b77173b4d5880b326bab78517fc0a16bb2d143c51c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 489709f63dc0d73faa1d958ea5422facc1d6e5f1e920a34904f257c3ffd25e8a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 d90d45d0bda5eeee8ca751b3f40d716ad68be3cdf0d7608dfb44edaab610e6e5
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 541B
                                                                                                                        • SHA256 f25d84dc023d4fe7e26b03327fa8bd35df61d37c708714895425fb5c5b7b8381
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 669B
                                                                                                                        • SHA256 9c25de710f519b1302329103e1e32618df5dd8f0981f74788d5fa86b679f99d7
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 1fa24217d395977daad841fd66b22e0d19700d7f27d7268bcbeb12732ac084f2
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 a246550deb9604cfd40933cb9a4fa7b52b138c0b7a789f98205a99d0052203e9
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 6d66a8544f1997b990d3a3cd5b02a3e731b95b28741b360f7f09cae0f2e4ddbb
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 39e1264adbed3c09e6198b0f92c6c9ab69551c6dbd2cd494b3da1ee3790a5f8d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 ae89a224616a67ccaaf9f920ba1d8c9c4c7276d055b5690398d6ffd1e080b85a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 a2e1f42a1902feb236d1825a533c735e2525504d5c716ea51dec2a8f53d89b1a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 29ab2e90f9dac348894bec87e15c76540874404483f1b3c697f6847ba996d405
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 7037aefa70ece5fbe1a610eeed9310cf344c84a263d72870d78b2c73cc0225df
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 d4cb6cacfcbde78e51707dfbb8fa444213a0fa0f7001da495c442328fe50f1e6
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 d5e929a45dd772a531f9513e5e119f0b564c96698c88d3357507e356dffe536e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 829B
                                                                                                                        • SHA256 7c39bfd654f57ddf38fb3e45ebc9e0c4ea4640bcb5724cea1d78242d6b8b4d4a
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 6KB
                                                                                                                        • SHA256 178f23cea510701c9acec2079696ce5e0421bf349a11c2da6b6d4ab1cfbcafe8
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 82df46ab3f9cd09d4d7d02c96b8ae47dd4c804a6069b54c34edfdbb4b55d0170
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 1d3707580dab8e336730d3f0062879c69d6632a7cb0d6a5c4eaa3e57fe6cce39
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 70657cd485a82e364f773d8454994cceecf54f5c664ab80734cf413844072b6e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 5030a7a77c58a1d4468fee046906b291411478da6c6f3755af84b140376c4499
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 f38b91d4a10a523bcbefb843274dc120f77f5c8ac99aefe1cfeae88b61872295
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 3fb0443d6876639853dc0495891d7cac06c58fbd54d21100e5d6c8aec896bed1
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 eadf5b1c560d44ac6010df90bbc968d1e3ac6259b679846554089e010b2b1a2f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 1c5d13617b1b23967085e23b601bb849dd7ca105aa0fe139f9f459a919435975
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 893B
                                                                                                                        • SHA256 df0ca9350a5d6df8b32964b62864f83d289cbfb296cf0ad89a5e5b4557afad0c
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 941B
                                                                                                                        • SHA256 faf84203b0cb02579ca66a70a93a68ae4722e044b95dcbbb35af5b5482ef187f
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 4ff1aed6bf112e05baf4c00b41cdfe9324cdef91e929feb66af47457e189a70e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_dd7cf345-0833-4366-8de7-df74c676566a.raw
                                                                                                                        • Size 797B
                                                                                                                        • SHA256 4dceedf6f34d7b6f32e99119fd0248a60af31ac5516e475acc5a2e99049f6ba0
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 b26d4ed313cdca220deb31c3f1317e97e106765868344224d0dc1b81467c9c70
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 ec7b497ccaba5ab0b313eaf91a4d024f6d64d91838482171f08f0f8221182a03
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 48576c8d3dfc5685f2ada1aa943c27f2e104056e3ffc96d2973004b89565fd5d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 ea3a8c6c01436f22ca0fc5c911d7f52955d9407f1b8358f1abd3d725920e905c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 de2e4ab2702624e4a9d9e5a731b41898eb9ef82cc9981b8acc718d17a3387064
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 9e064a32d353d551771c1a6c87f8bc32de0bc2bcee6ce7cc56b5c9ecef21b458
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 7b9b150518dacb9ee2e89a71763d2435aee7bebafa1d99926da090952d17b6f3
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 34edcd804f58b13695d1466146706495245a7771c14613e57a00f22e6524c851
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 80efc473a40279c445a3330fd1a7ff8dcb9f4486e664ca8dcb2486672c0ab388
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 74c9b02f224a823355488032f4d4486549ddf2840214cb76a9b7fe29339105da
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 3b4c3d98945f80e2e0c21aa7cc5506b0f1126c92d23358bb5731eadba4f8c00e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 d644f6657133e2917391e1d53269a0a8c2b4f08f6cad5adcdd2625169d69430f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 69fa0d1aa6af892c0dcebc8b92df3ccca8fff55e7ed8a7c18c3b0f004cd2c555
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 802c0e86f99cd2fbda2b9ddbeb60120a1ac6130402f8876e3279c5728b63a469
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 e17642f336d73a297dc3378143d6e41bcdb2c3f966d64957c75dd5e25593eab1
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 17f5abcec44b4fd25625f8a1cd7b1dabe1c143b5db586e4b96f31356419576bc
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 541B
                                                                                                                        • SHA256 4017cada5a8d3e56ced53973c28729a5cf9c73dc37efc6ae9e675ad98c0e1be1
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 653B
                                                                                                                        • SHA256 ed2bd48954f0c59ec3688e382589670b8d50d7a3e183b62ac036ece5a210ac16
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 47e91b4ba952aea87ae0cec8641c85910d372e3b67051a1544fe7179f228118e
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 ae0a36f70ce8bd41941ef255d42e2eaeaef80509496f0a5ed5b0ba9ab8150066
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 781B
                                                                                                                        • SHA256 619bf01d77b715b306befcc373d4f6982881bb8d06e7d16d6755d39696849f27
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 30ea2fa037cc3881a006981cb91cd068a2fd3b16ae756dad01776da700153341
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 2d5e1d6c17dd9623a1b030436887242e03a7b0ba0b1df9f179f54620c6a807d1
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 e0a110fa39bc29e0f70b5cf5b71ea01f2c58c6cbd2186a7fa6415fab967ff7e8
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 6b83cb6c86dcfbe9ad67d6cb151827a9faba71a10a76e2913da3a8647f06ac28
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 78e11eee5ba95e7f47c62bdfaa05ca316609489665a05c826afea53f2fc7f179
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 51bcca9333596fc1244afff92755a9b254ca8f0d689f8c00189cd53aa25e6b21
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 4c51fc9c2a3e62741fe5ff4cb07f5183b496b812b701a1cb9e6bc4960747ed7d
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 ecbe164c47e0fedddb1e7be5e5f2eb30dd38ffffb4644aaf36148d5dfe551ddc
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 95b3c199639fe33918fc24b03a51891c89de6dffb64349db147d248d24d84b02
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 3c20535852b16d1b220d6a95feb6e64a728c7941ebabada22d307038f765e12f
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 3550a7fbde24d671794dad533d0b713fdb2e4876dfcca7739d84be6c6a05834a
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 d6c1b4ef4916be572acc4dd1fc048378a1b78a4a26388426abdd49013c41c5bc
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 45ce63b4b7c059026ccd1e6adce0d56289f8bcccfaa4b81c9f9a687524d0aae7
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 82284deeb802bd3c059120b4332323fdb76b33d6eb9dacf51e3451c23ae14b56
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 3d7dc4428e137d7f5720fbe4be5bac2c03c6bd9e80827f0e15d31b1cb36df481
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 a4bf0db79d0c3ba1ec46dce3d6c33a45a786eb98e0f6e1b4883f80dd4fe3d1dc
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 5e3691f575103ee28c54ed6c3b7574e769f5c90330fd4f34867c629b05512afb
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 720adb6376989cf58061c2295de2d03713f512fa41e296926483c2ccc3bf322e
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 e1287e8299e1593bd040551d288fb9fb75f86c64a6286e42a8913101d5da7171
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 9f611d699956d7e8b68e3397a03d3d533f03b180df17386343b2e5c41a1f8e5b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 685c543be7250bd44824b84446fbde444fd7c5b4f8b176ece0b74b92a1ac9489
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 05cb733d73fe7304acbaaaa32ad177115f7cdab7c707bd2eb85723465fd84845
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 006b1bf4df9270d16d3989c713c4fea8746b616d2abbc9eb8b7804484983b466
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 f5ceabc9c5adaca704d337a54b93976b703a263e873525e8627d01e8176433e7
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 65b05abb7f5d85c16d4cf24bb6e2e840086dc2d77d603c0a3f5fb6dc9bcb93a8
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 11KB
                                                                                                                        • SHA256 5117b2b9147b6b94df96d6f070aaf0529defba6c5124d2657f9d3584da420bc3
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 8fab1c7780c4e9b795a570d193bfd1b71cf94903cc32b67bfaa93f7c3535901b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 58870957371538d82e9737b875dcbac4d0dd997d8273f44693e49a093556c526
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 53eddcc15ec77a67720000ba00924965fd4ddd0993d45aaa3d529230546076b1
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 816ce733f7e8916285d8f07971b2b05fae558646d00d804a062e00154006957a
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 b85616b83e3b6e6d9eed7f41b8a3617d1cca2e606103c6f611336184a6b128a9
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 c907bb50cab6b913bef80f777a556f8e253aefe75a3123f4d358421baad6df8e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 7c55198bcc6bacd39548af2e79ff3043c752d94dc333ba8efc4bff646a03c781
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 6ff5b809d4c9cd88a407565d5458c73ff5bcd7d96cbd758caf0e61cb4a397965
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 690aa2d68bdb8b38454eea90774379897d5b4b05d9753d05784be9c13d76ae5e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 e6748a12954c7403a90a239687cd80ce3e143d9761c088024aedcfdc9c7c8072
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 20f84a9de25e62ea9d4d3fb5bf80d8228cb80c499ddd5e2fcd580d20416dcddf
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 1871058ec319bbf4fe6d9a638b19cdc7d4aacb06c13cf6562dda36de7ba6668d
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 9e8f4d5abb4716682a21a1c6a39f739b913e15b66055c9d291c241add53767f6
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 3b63fbedd99a7d615c7fa23b4b80d17f9a74f7a44ef639d6ba08626ebe5abd23
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 acb827b3efb57838d399a54efb5708096f8f46e24c2f72f57e91310cde21af1f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 7c4344f52d856bd3d30cff2584f3957cd78b18385559e437917bb7a06a35300d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 0ee037420aabec43d6111b1fef3d0b927c011a2bccbe503cf05c729017c4cf03
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 98791419c410b0fd27cee7981f2671f02bd880a1b78b7fbfe6fc145f9850f5e4
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 5d0ec6bf3be0fefde1b91b35ddd8dec1189ef4f98f624e0f900de895409faf38
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 8b5eec488e3ff37c8acdc1848a669b6c591646a90367baac44f5cce4132a27a0
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 35862f4ee9a969fa09d9494ab896478dfe6de29da192d58acbdf3a3644a69b33
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 b7813545580fd073f0c843c2900aad049c5f64bae4ef8663122592e0760af5f2
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 d10a7bc2d89b080b0d8d9e67153f5aeff6997da380caa6d143fb5640d60fb499
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 ea11dedc35a5a85035f8d9da2ed27dd769a7de5c916dd2db0dbcecadea6b44df
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 efba5216cccc7ae95d79eefd6266f6e4338b4effbe0e9af3dad0a0313756745b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 9e5881556fed48c9cf24ac9dcf37d4932833052d55f06b2082e3627e44921059
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 95ca9a5ffd7aaed70d8bdce8b5336f0b46a0a878b505bdd4be7db984e8698504
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 11KB
                                                                                                                        • SHA256 b090a273e5070e929b1ea40e361af5c23a0519e544a4394a1adb5fec86932344
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 11KB
                                                                                                                        • SHA256 25ea9deef6901c4d45dc1c0b5d50a3596652e39c6ecc5a15c2fba0a1f2d701fd
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 f6e1aa6308bbc0557cb4a60cdb79bb3dcfe3633b437fb5292043549bc27bd615
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 82ebf081eade5faa54d0eda073d598653907152c0e959f0f012962054be9b4b5
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 11KB
                                                                                                                        • SHA256 3f69000591619414aeb6d205d461f8bdad798912aaaffda10b091a54853de4ef
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 a7dc233038056024c46db6a666dcd0fe5f0f8e3e3f2924b3d0250bea141b1fbc
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 11KB
                                                                                                                        • SHA256 b8e40e8deec3739b6e6c58cc873339d576d8f52d4009821fbe2f2754d7241a0e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_e767701b-5ece-49b9-9066-3ae636b8fd4a.raw
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 7ba0598a78020b1497325e0128713174b10a78c1a7082c947ecd813edd7125ea
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        CURRENT
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\CURRENT
                                                                                                                        • Size 16B
                                                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                        Submit Download

                                                                                                                        b14a5708-a05b-446e-803d-ac578ee7a3e5.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\b14a5708-a05b-446e-803d-ac578ee7a3e5.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 c7b35f1d8ad78ad2d79419f56d783dd4700aa842b047e7e081b6afcb4180192e
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        b231074b-fbaf-4e37-8911-4cf951b5cf68.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\b231074b-fbaf-4e37-8911-4cf951b5cf68.tmp
                                                                                                                        • Size 600KB
                                                                                                                        • SHA256 7611262958cf9878425888933c8e165cee829bbe5067201bdf41ebb0ad50645e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        dd2f9c26-6696-420a-bf41-cfd5941bfb79.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\dd2f9c26-6696-420a-bf41-cfd5941bfb79.tmp
                                                                                                                        • Size 827KB
                                                                                                                        • SHA256 6aff0f04f329e9e26289d75c4574d831273e3ff257f0da882a4eb152c9a4405f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        f16ae866-a657-4196-bd34-f6b89e33a59f.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\f16ae866-a657-4196-bd34-f6b89e33a59f.tmp
                                                                                                                        • Size 173B
                                                                                                                        • SHA256 e9f7268828d32bb578dcf14e6b6d2c66d644ce9a8a0cd30fa8d7c6883ad59711
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        spotlight_campaigns.json
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\spotlight_campaigns.json
                                                                                                                        • Size 41B
                                                                                                                        • SHA256 c7860a3f5a72aabbad8d3fcb1dca86e7458c39e460968409b15e6001dc4fb45f
                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 779B
                                                                                                                        • SHA256 d26c707447c5fa4b73c6d75fd3d203a15dfda43996ce6a1386992b5ac0ed4863
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 870B
                                                                                                                        • SHA256 f4f13616ec1d823583c1a9ae3e220cef2ab06fa600c311bd867eb62d3072fa76
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 963B
                                                                                                                        • SHA256 95d54115aa5350d0a9ab38ba74247b8415b81690cd738cb04593aa79b47e4663
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 b0c6eb884077e0ed78a8d4effb639c758032d39dfe28279a65d4baa3ccb96b49
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 cb4bcabe00b9e20582f2aa610ffc1fa2f63d6297c2b14b4bfb494d9e8ae5f4b0
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 9f9515b1434b70d6ab2d52d5db33361cb6836cbeb72d72e6359b67d879e01600
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 b4ea9e135256ecb4ad4b985aac7aa06c7004f45fd2201a555ddae8dc7a64d8fe
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 d129473c4fa3e9a2f265119ce556423e09fac2fe90a19559a0be2196ba27fdc8
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 a769391258f5e59d96e0f6b4b02b4fed7314010edf5994817fd8c601036a3b67
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 28441b0897b202a6dad532131c9aba7214e354a57659fa11ccee29eb896c6495
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 667365d35508351482802b73e4a707f2be3ed92c658f6cfb5cb32b94aec9907e
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 4a151224dca510ca1397197bed6d0cd4f6fa59f0a4658d186519a2c43e95c47c
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 90a9d2bca66cebfb7eb68a8f865dd72588ef6c22d4b30d1db83ffe758b173e74
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 fbd9df0c8447c85889857fd8c2dafeef0f406a3aa796d5f0df0752ee854848a9
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 cdf6fbbe1fd84dc0afbaf0374f0cc71d08519d470485235587c345a27691626a
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 981034625d49a33cc741848cce711e1d667166552c1558d0bb1a3a04455e7c63
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 505B
                                                                                                                        • SHA256 eaa95a978eba04b7d9541a2adff5ef4f36b33378ee4472cfedc7932f1a6cc36c
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 597B
                                                                                                                        • SHA256 02c9b552af565aa39252217a4c76b71f4f77490fb4bcde33e37414a6ccf3a253
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 4ed3133218047083abf9c67298b41efa38e48ed9517ea989f9f5cb2d77dc4759
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 cc01fe6d55e2357fe36481d1e8263d6f018e1b6d0e820e31a86c0432c5575dec
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 9870a80a02ec479cccb82624434200f9a47fbac9d09fa043e590f614f611a993
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.0.124841216
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.0.124841216
                                                                                                                        • Size 690B
                                                                                                                        • SHA256 582f91f5b005762268fa0ac842d6644a9aa49ae3bdfe438314f231c3398bef94
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.1.273759479
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.1.273759479
                                                                                                                        • Size 382B
                                                                                                                        • SHA256 a37edc57a8851557dba40f340bce29831efdb376776211490a080a99ccacceae
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.1.273759479
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.1.273759479
                                                                                                                        • Size 480B
                                                                                                                        • SHA256 2f6e63d604e4049ab3282ec26c81398faabbfd1e79c9a0a3cb425bada68ec8fe
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.1.273759479
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.1.273759479
                                                                                                                        • Size 542B
                                                                                                                        • SHA256 41a6fe6c410ab9544d3b6388b706cae9a5f649a4d0949e96755c7397d883b2ef
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.1.273759479
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.1.273759479
                                                                                                                        • Size 200B
                                                                                                                        • SHA256 3db3e485072b0d692e1a56b06362e55aa4bb6ba766269fd656ea2f0536a00a86
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.1.273759479
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.1.273759479
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 0a93694c7d34bacf973ba00ac90f602d8aec8f080e1dd5d4363a0a30a34e51d4
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.1.273759479
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.1.273759479
                                                                                                                        • Size 224B
                                                                                                                        • SHA256 9d571544edaba0f935ad7bcea411d27682bf5ca8128b8c8bfb140991ef07d936
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.1.273759479
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.1.273759479
                                                                                                                        • Size 224B
                                                                                                                        • SHA256 62bf30183ec54ee029f3dbdd750611d8eac5bb349f73dd3d55abc8cbbdc11623
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.1.273759479
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.1.273759479
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 ccbf2a43733e88a9097e517cfc7f19c18b952316f119036e60a59dce64cb9f6e
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.1.273759479
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.1.273759479
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 115cb2da415399dedcd46418d9d02dd440693e9bf4bb73c2597ecd3ced99067f
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.1.273759479
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.1.273759479
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 cd19dd6f6aa6c17743ef86e07a09a957587908ddf5b50e8c0d784f625477c367
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.1.273759479
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.1.273759479
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 81dfd0e838e439c04431c34bae6dfe968926ca97c82576835d0965ca8d4ef67e
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.1.273759479
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.1.273759479
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 1ae68a40dd9e0ce3189e1c975cf244c4bdc28efb90101690f55a2eb07a130c3b
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.1.273759479
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.1.273759479
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 0882cee37f64cd0f6c1d6cabe06cc769d3df3cfb9904cb0931067dd7372fcc18
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.1.273759479
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.1.273759479
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 7d7cfc4c0e5d0aad5118e59d5193896e6dbbde3288d183526a51f90287c4f4b6
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.1.273759479
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.1.273759479
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 37587bc6ee07bef47e81d0aeb8c0e6af3a2bf40d7d029010f24414e35a2274a2
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp1692.2.599816463
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1692.2.599816463
                                                                                                                        • Size 242B
                                                                                                                        • SHA256 a7d6f4579dd6e6776c468436760dbf95be98d3f67291ec62a41655088017a039
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.0.1823105495
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.0.1823105495
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 ef7e736cf1bad2ba668cc1e61a6e9e82742c51b69c3ba51c030e369fd07ee0d5
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.0.1823105495
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.0.1823105495
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 37d4a7750ef1795efc79a0558fcf2077b2cb244cf65415c36b54a719108c8c5e
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.0.1823105495
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.0.1823105495
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 0645cc3c5a55401cdd71284baab8d48282192c5d9a174b4432e1f8cf2a2ab632
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.0.1823105495
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.0.1823105495
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 3790ff9c2ed7041aac79e5cae8faa9ea2bf920d3caafed29e55a9de94a475293
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.0.1823105495
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.0.1823105495
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 aed00c18b6918ad031b29aa031b0b763278cf8fd32ef55347d1b5e6f944129f6
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.0.1823105495
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.0.1823105495
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 b794aa492206f1f84aa5cfde5d02f39a12047668045fa33423ada06a2fa4124d
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.0.1823105495
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.0.1823105495
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 22a80f254c03d4c3f5fe36eae7c26db5f31058592f52e32ee30735e04e1f66a8
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.0.1823105495
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.0.1823105495
                                                                                                                        • Size 523B
                                                                                                                        • SHA256 c26b8d951841facebcd9b77b49c37eb886d1f4ec713d806557b135bd01d9669d
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.0.1823105495
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.0.1823105495
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 18680ed84233e163940c983d18974b5e56c407d469b6a07e2d16293a6d6d137a
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.0.1823105495
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.0.1823105495
                                                                                                                        • Size 363B
                                                                                                                        • SHA256 4283d8f78532fab411b0b7ffd9b873283d2d8903f1582855b72a652e8e6ecb00
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.0.1823105495
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.0.1823105495
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 74e89c32e2984c4bd7e54cd6684806a3fd5091f8c36ebdaffb284211ea0e34e9
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.0.1823105495
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.0.1823105495
                                                                                                                        • Size 461B
                                                                                                                        • SHA256 8016f7f8c1126d2aa5c3b716c5ac0163976cefc9e13e98e931b5e55610e42e50
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.1.1182772116
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.1.1182772116
                                                                                                                        • Size 320B
                                                                                                                        • SHA256 09ddf62c34bdf853fe92bd15798cffb5bcec19b72c7c6610bfaff54243f68be5
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.1.1182772116
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.1.1182772116
                                                                                                                        • Size 200B
                                                                                                                        • SHA256 e34d640e6cc719ea0ccd870f0ae28ca83443de5f8c29e01112dad294b8ddba37
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.1.1182772116
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.1.1182772116
                                                                                                                        • Size 480B
                                                                                                                        • SHA256 3df5e66fabbd1a9706b578349b0c3362fde21bef4033aeabe0331be2fad046cd
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.1.1182772116
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.1.1182772116
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 8cccc63ed2c9dde9dd378103bed1e1ed165333d372c24fbd90404e6697df1052
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.1.1182772116
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.1.1182772116
                                                                                                                        • Size 418B
                                                                                                                        • SHA256 f6e8d4083b47a746440f6062fd2dabbc36a5d23f12511bc70e875e7160311c6f
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.1.1182772116
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.1.1182772116
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 07482d2750712178979d522388f960bbaf5a129acee81af3c781afb459986c09
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.1.1182772116
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.1.1182772116
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 22865e0ecd13b6ac78c060f082c13e9b7263bf9cad93cf9e5dfb2510f8b21378
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.1.1182772116
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.1.1182772116
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 7f5c9923b2ecc40f677fd71f76d96c67bba4ba5edfc0a2cb26975571293bcb5b
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.1.1182772116
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.1.1182772116
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 8e4f593c247b76f24badbbe50599ec72867a0749539989588bfba45c19693097
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.1.1182772116
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.1.1182772116
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 e4929762d2f802c8d676b33bba5e1f834b74c159f749e898cb7d16060df884e0
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.1.1182772116
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.1.1182772116
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 d8c9c4004ad98f4dee363f6751e6483f99bbf38881020226fa803325bbfb951e
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.1.1182772116
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.1.1182772116
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 269369399427369b54fe2410a951ab16addec09a9f0d75ad9da4a2f2342cf670
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.1.1182772116
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.1.1182772116
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 6f8c9f2a63881a7b51015261acb911307d4327338e06335084f14267d86ace17
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        ssdfp6000.2.1229095587
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6000.2.1229095587
                                                                                                                        • Size 217B
                                                                                                                        • SHA256 6fec6e283e30a6fd17da5f2d2a561cfb3f0e69be99216c4160426c4dc5a3850b
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        data_0
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                        Submit Download

                                                                                                                        data_2
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                        Submit Download

                                                                                                                        data_3
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                        Submit Download

                                                                                                                        Local State
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 d30925b4abca754fd3f92510b3397146fdf06f48c4154bc9d2f788c4f3168896
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        Local State
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 23bb259fb2244f95371ede0b230d7320362c1a4eff984ae015ac44e53e62dbd5
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        assistant_prefs.json
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json
                                                                                                                        • Size 151B
                                                                                                                        • SHA256 49c596946a3e5277c87d95482342a11827fb1409e4e614142efcb01a74829898
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        assistant_prefs.json
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json
                                                                                                                        • Size 151B
                                                                                                                        • SHA256 9cafc5e97b85a4274c5709cf9e11aa31c65e26ff32d20abb1d3d4a236b19c91d
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        d2e38036-a731-4083-ad9c-d37f311e70d9.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\d2e38036-a731-4083-ad9c-d37f311e70d9.tmp
                                                                                                                        • Size 151B
                                                                                                                        • SHA256 964f7274bf00d99d87285c69693b7586b994e1e59d72f99219260b85dd624c6d
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        4b6b737a-d038-417e-be1a-53e1ce1a9296.tmp
                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\extensions_crx_cache\4b6b737a-d038-417e-be1a-53e1ce1a9296.tmp
                                                                                                                        • Size 13B
                                                                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                        Submit Download

                                                                                                                        OperaGXSetup.exe:Zone.Identifier
                                                                                                                        • Path C:\Users\Admin\Downloads\OperaGXSetup.exe:Zone.Identifier
                                                                                                                        • Size 559B
                                                                                                                        • SHA256 9cf734fbd25f8cde893dd1ac95fb946bf51a4ec37d3c677beb640f81313bfc00
                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                        Submit Download

                                                                                                                        Unconfirmed 17054.crdownload
                                                                                                                        • Path C:\Users\Admin\Downloads\Unconfirmed 17054.crdownload
                                                                                                                        • Size 3.9MB
                                                                                                                        • SHA256 e42bea0f4857d2ed21bea64b86f6c4bf6461c86c5a7a9c636fdbfc032a8f9379
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                        Submit Download

                                                                                                                        memory/336-1765-0x0000025FF2F80000-0x0000025FF32F8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/400-1647-0x000001FB55230000-0x000001FB555A8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/432-731-0x00007FFB1BDE0000-0x00007FFB1BDE1000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/432-732-0x00007FFB1A1F0000-0x00007FFB1A1F1000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/432-1830-0x000002C241E80000-0x000002C2421F8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/1004-4599-0x0000024F4A7A0000-0x0000024F4AB18000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/1052-1775-0x0000027C2F340000-0x0000027C2F6B8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/1388-3088-0x0000021A3EFC0000-0x0000021A3F338000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/1888-3134-0x000001AA59220000-0x000001AA59598000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/2136-4567-0x000001A2F4C60000-0x000001A2F4FD8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/3020-3087-0x000001ECE7930000-0x000001ECE7CA8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/3128-4566-0x0000022A302A0000-0x0000022A30618000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/3144-1646-0x000001C9DC420000-0x000001C9DC798000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/3660-3225-0x000002333EBA0000-0x000002333F32E000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/3660-3578-0x000002333EBA0000-0x000002333F32E000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/3660-1828-0x000002333EBA0000-0x000002333F32E000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/4056-1766-0x000001FC77180000-0x000001FC774F8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/4528-1778-0x000002388A8D0000-0x000002388AC48000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/4628-1764-0x00000106A8B30000-0x00000106A8EA8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/4820-1774-0x0000022F79520000-0x0000022F79898000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/5068-1736-0x000001A1CF770000-0x000001A1CFAE8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/5188-3132-0x000002523A650000-0x000002523A9C8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/5228-1771-0x000001FDC8050000-0x000001FDC83C8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/5272-4562-0x0000024940200000-0x0000024940578000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/5304-4563-0x0000014D24020000-0x0000014D24398000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/5432-1782-0x0000020C04CD0000-0x0000020C05048000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/5476-1781-0x0000020C1F090000-0x0000020C1F408000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/5692-3126-0x0000020647760000-0x0000020647AD8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/5784-4637-0x000001F8FB620000-0x000001F8FB998000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/5808-1777-0x0000017391050000-0x00000173913C8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/5956-1772-0x0000022D2F9D0000-0x0000022D2FD48000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/5968-1773-0x0000016B3BF70000-0x0000016B3C2E8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/5984-1779-0x00000163013C0000-0x0000016301738000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/6000-5129-0x00000146CF390000-0x00000146CFB6A000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/6004-1763-0x000001E3EDB70000-0x000001E3EDEE8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/6088-1776-0x0000023A16040000-0x0000023A163B8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/6176-3131-0x00000220E0980000-0x00000220E0CF8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/6256-4564-0x0000015673430000-0x00000156737A8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/6624-4561-0x000001D56B140000-0x000001D56B4B8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/6676-1780-0x000001AF13870000-0x000001AF13BE8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/6776-3127-0x0000021D08A80000-0x0000021D08DF8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/6844-3128-0x000001666F220000-0x000001666F598000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/7032-3129-0x000001C3E3050000-0x000001C3E33C8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/7036-1786-0x00000133E4610000-0x00000133E4988000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/7196-1787-0x0000014500F20000-0x0000014501298000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/7220-1807-0x0000019B7E440000-0x0000019B7E7B8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/7244-3114-0x000001C9351F0000-0x000001C935568000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/7416-3105-0x000001F175C30000-0x000001F175FA8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/7424-1808-0x000002420EAD0000-0x000002420EE48000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/7508-3133-0x0000029FFFBE0000-0x0000029FFFF58000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/7620-5094-0x0000018C04960000-0x0000018C04CD8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/7752-3130-0x0000024A5A670000-0x0000024A5A9E8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/7844-3050-0x0000022D72B50000-0x0000022D72EC8000-memory.dmp
                                                                                                                        Download

                                                                                                                        memory/8004-4565-0x0000017F899B0000-0x0000017F89D28000-memory.dmp
                                                                                                                        Download