Analysis

  • user interaction
    yes
  • max time kernel
    88s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    20/07/2026, 11:15

General

  • Target
    TLauncher-Installer-1.9.5.1.exe
  • Size 25.5MB
  • Sample260720-ncxegsat5x
  • SHA256 0619bd07d3183a8ae0cb1be408c6ad32295d47ddd666b2d51edd4d5f5d211227
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 33 IoCs
  • Loads dropped DLL 32 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops desktop.ini file(s) 1 IoCs
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Service Discovery 1 TTPs 3 IoCs

    Attempt to gather information on host's network.

  • UPX packed file 14 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 15 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 26 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies registry class 60 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 13 IoCs
  • Suspicious use of WriteProcessMemory 36 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe
    "C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5012
    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:3969818 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe" "__IRCT:3" "__IRTSS:26673860" "__IRSID:S-1-5-21-552508041-2681165170-3229858294-1000"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4728
      • C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
        "C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2960
        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:3839250 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:3869932" "__IRSID:S-1-5-21-552508041-2681165170-3229858294-1000"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:4688
          • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
            "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=0
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:4840
            • C:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exe
              C:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exe --silent --allusers=0 --server-tracking-blob=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
              6⤵
              • Executes dropped EXE
              • Enumerates connected drives
              • Enumerates system info in registry
              • Suspicious use of WriteProcessMemory
              PID:5828
              • C:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exe
                C:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x2a8,0x2ac,0x2b0,0x284,0x2b4,0x7ff761afcd88,0x7ff761afcd94,0x7ff761afcda0
                7⤵
                • Executes dropped EXE
                PID:3248
              • C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\installer.exe" --version
                7⤵
                • Executes dropped EXE
                PID:4448
              • C:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exe
                "C:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=5828 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_20260720121630" --session-guid=9545f18b-cca2-4b97-84bc-fdb4336bb92b --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=C008000000000000
                7⤵
                • Executes dropped EXE
                • Enumerates connected drives
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:6076
                • C:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exe
                  C:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x2a0,0x2a4,0x2b4,0x27c,0x2b8,0x7ff761afcd88,0x7ff761afcd94,0x7ff761afcda0
                  8⤵
                  • Executes dropped EXE
                  PID:5924
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe" --backend --initial-pid=5828 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301" --session-guid=9545f18b-cca2-4b97-84bc-fdb4336bb92b --server-tracking-blob="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 " --silent --desktopshortcut=1 --install-subfolder=133.0.5932.39
                  8⤵
                  • Executes dropped EXE
                  • Enumerates connected drives
                  • Enumerates system info in registry
                  • Modifies registry class
                  • Suspicious use of WriteProcessMemory
                  PID:5732
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x2a0,0x2a4,0x2a8,0x278,0x2ac,0x7ff7756bcd88,0x7ff7756bcd94,0x7ff7756bcda0
                    9⤵
                    • Executes dropped EXE
                    PID:2976
                  • C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe
                    "C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Adds Run key to start application
                    • System Location Discovery: System Language Discovery
                    • Enumerates system info in registry
                    • Modifies Internet Explorer settings
                    • Suspicious use of WriteProcessMemory
                    PID:4956
                    • C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe
                      "C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x268,0x26c,0x270,0x244,0x274,0x374b80,0x374b8c,0x374b98
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Location Discovery: System Language Discovery
                      PID:4484
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Location Discovery: System Language Discovery
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:4740
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x268,0x26c,0x270,0x244,0x274,0x3b4b80,0x3b4b8c,0x3b4b98
                        11⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        PID:4408
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                        11⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        • Enumerates system info in registry
                        • Suspicious use of WriteProcessMemory
                        PID:3392
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                          12⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • Enumerates system info in registry
                          • Suspicious use of WriteProcessMemory
                          PID:4792
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x174,0x178,0x17c,0x100,0x180,0x7ffe484a05a0,0x7ffe484a05b0,0x7ffe484a05c0
                            13⤵
                            • Executes dropped EXE
                            PID:4360
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                          12⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • Enumerates system info in registry
                          • Suspicious use of WriteProcessMemory
                          PID:5264
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7ffe484a05a0,0x7ffe484a05b0,0x7ffe484a05c0
                            13⤵
                            • Executes dropped EXE
                            PID:2868
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2a0,0x268,0x9b8378,0x9b8384,0x9b8390
                          12⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          • Suspicious use of WriteProcessMemory
                          PID:2208
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                            13⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • Enumerates system info in registry
                            • Suspicious use of WriteProcessMemory
                            PID:2732
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x18c,0x190,0x194,0x188,0x198,0x7ffe484a05a0,0x7ffe484a05b0,0x7ffe484a05c0
                              14⤵
                              • Executes dropped EXE
                              PID:1816
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                            13⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • Enumerates system info in registry
                            • Suspicious use of WriteProcessMemory
                            PID:1468
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x178,0x17c,0x180,0x174,0x184,0x7ffe484a05a0,0x7ffe484a05b0,0x7ffe484a05c0
                              14⤵
                              • Executes dropped EXE
                              PID:4856
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                            13⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • Enumerates system info in registry
                            • Suspicious use of WriteProcessMemory
                            PID:3860
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7ffe484a05a0,0x7ffe484a05b0,0x7ffe484a05c0
                              14⤵
                              • Executes dropped EXE
                              PID:5592
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Adds Run key to start application
                    • Checks processor information in registry
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:3328
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7ffe484a05a0,0x7ffe484a05b0,0x7ffe484a05c0
                      10⤵
                      • Executes dropped EXE
                      PID:1328
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1680,i,11421243158721217941,9179980419602890167,262144 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1996 /prefetch:2
                      10⤵
                        PID:6064
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=1864,i,2429456127008764104,6916464543063263835,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2100 /prefetch:11
                        10⤵
                        • System Time Discovery
                        PID:5412
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2356,i,2159110727738137145,13061383368321807579,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2944 /prefetch:13
                        10⤵
                          PID:4220
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3228,i,6777415828758089639,8096578912539714838,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3304 /prefetch:14
                          10⤵
                            PID:5804
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3240,i,6707305565768514504,13495823401410520360,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3324 /prefetch:14
                            10⤵
                              PID:3196
                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3200,i,16803297801629285613,17281066604504684047,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3196 /prefetch:14
                              10⤵
                                PID:3152
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3216,i,12970363727247410520,6358687787856512091,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3284 /prefetch:14
                                10⤵
                                  PID:5940
                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3252,i,1920708019737383122,2197072882439317904,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3296 /prefetch:14
                                  10⤵
                                    PID:3356
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3264,i,6450693431624880085,15399200655455379641,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3364 /prefetch:14
                                    10⤵
                                      PID:3000
                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3784,i,11946396772994447781,11785525107770548556,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4156 /prefetch:1
                                      10⤵
                                        PID:5452
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_gx_splash.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                                        10⤵
                                          PID:2560
                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4676,i,6934613292856086486,1525267666113397272,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4680 /prefetch:1
                                          10⤵
                                            PID:2440
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4820,i,13663099364048944320,10220393581417927814,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4864 /prefetch:9
                                            10⤵
                                              PID:4596
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4900,i,15760572563495356968,11331898669237465337,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5008 /prefetch:1
                                              10⤵
                                                PID:5532
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5028,i,11046507957982065670,8015022661153599894,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5044 /prefetch:1
                                                10⤵
                                                  PID:5048
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5184,i,6311679594519805288,1543462148603924141,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5012 /prefetch:14
                                                  10⤵
                                                    PID:1812
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5188,i,255026220090991408,2446464926341534633,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5252 /prefetch:14
                                                    10⤵
                                                      PID:1500
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5192,i,9261365517638169717,1791956804986456150,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5048 /prefetch:14
                                                      10⤵
                                                        PID:1420
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5196,i,9109300382025959033,7266460876594583805,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5304 /prefetch:14
                                                        10⤵
                                                          PID:1720
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5976,i,13990822337560826895,11113124049300977015,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5400 /prefetch:9
                                                          10⤵
                                                            PID:6456
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=1744,i,3707146112840401045,12044469830763918167,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=3772 /prefetch:9
                                                            10⤵
                                                              PID:6708
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=7008,i,12108026700483079971,8064288186176923903,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7056 /prefetch:9
                                                              10⤵
                                                                PID:6792
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6676,i,4976230741646492505,4708773897042616213,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6708 /prefetch:1
                                                                10⤵
                                                                  PID:2376
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=6652,i,372992761579553501,7619533810130027576,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=5968 /prefetch:12
                                                                  10⤵
                                                                    PID:6384
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                                                                    10⤵
                                                                      PID:8156
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x29c,0x2a0,0x2a4,0x234,0x2a8,0x7ff754e49860,0x7ff754e4986c,0x7ff754e49878
                                                                        11⤵
                                                                          PID:6224
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7948,i,11310305392459303429,5196904728000380341,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7976 /prefetch:1
                                                                        10⤵
                                                                          PID:8188
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8136,i,5381023736890072235,3269420254697279552,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=6936 /prefetch:14
                                                                          10⤵
                                                                            PID:6516
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3196,i,15732382098674753405,6368881330007752360,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=5472 /prefetch:14
                                                                            10⤵
                                                                              PID:6608
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3220,i,6852492848073044012,15784035708753979837,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=3728 /prefetch:14
                                                                              10⤵
                                                                                PID:6812
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=6948,i,719981030904136551,242146879791185337,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=3680 /prefetch:14
                                                                                10⤵
                                                                                  PID:7376
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3412,i,735251674232045862,18204129424312245611,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=3388 /prefetch:14
                                                                                  10⤵
                                                                                    PID:8108
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3416,i,13108432903088793713,9903184317000364544,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=3432 /prefetch:14
                                                                                    10⤵
                                                                                      PID:8120
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3488,i,14783848987557954769,9931328381570538596,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=3480 /prefetch:14
                                                                                      10⤵
                                                                                        PID:6364
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=8304,i,8062804358320403420,6022944512566318968,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8352 /prefetch:9
                                                                                        10⤵
                                                                                          PID:6572
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8472,i,11171997894607447230,5990860698578126784,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8480 /prefetch:14
                                                                                          10⤵
                                                                                            PID:6960
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8508,i,9055088373799597174,15160834213806780663,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8524 /prefetch:14
                                                                                            10⤵
                                                                                              PID:6864
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8480,i,14848515758091118739,13784852455095786361,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8780 /prefetch:14
                                                                                              10⤵
                                                                                                PID:6688
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8516,i,14681421580049346315,11568950169808319073,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=8940 /prefetch:14
                                                                                                10⤵
                                                                                                  PID:252
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8788,i,17924554729941655913,5348193822117567479,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=8964 /prefetch:14
                                                                                                  10⤵
                                                                                                    PID:736
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8928,i,7011578162982053521,6121033614850560736,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=8984 /prefetch:14
                                                                                                    10⤵
                                                                                                      PID:4772
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8968,i,5712360300471999671,10516968665090649061,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9360 /prefetch:14
                                                                                                      10⤵
                                                                                                        PID:6420
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9512,i,14706984189188454009,8552387532819786591,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=9536 /prefetch:14
                                                                                                        10⤵
                                                                                                          PID:7560
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9668,i,8481489840625210881,14742451887554182257,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=9684 /prefetch:14
                                                                                                          10⤵
                                                                                                            PID:7260
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=4184,i,4431425895047435419,811372819053889011,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=3952 /prefetch:14
                                                                                                            10⤵
                                                                                                              PID:7800
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9984,i,13505256370970115923,17978808870116370930,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=5456 /prefetch:14
                                                                                                              10⤵
                                                                                                                PID:1276
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=6952,i,15685768790551687463,12495157895452108707,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=5380 /prefetch:14
                                                                                                                10⤵
                                                                                                                  PID:8148
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --edition=std-2 --host=https://autoupdate.opera.com/ --installationdatadir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --installdir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --lang=en-US --pipeid --producttype --requesttype=shutdown --version=133.0.5932.39 --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --firstrunver=133.0.5932.39 --firstrunts=1784546250 --consent-info=eyJzdGF0aXN0aWNzX2NvbGxlY3Rpb25fZW5hYmxlZCI6dHJ1ZSwidXNlcl9leHBlcmllbmNlX21ldHJpY3NfcmVwb3J0aW5nX2VuYWJsZWQiOnRydWV9
                                                                                                                  10⤵
                                                                                                                    PID:7884
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x234,0x29c,0x2a0,0x280,0x2a4,0x7ff754e49860,0x7ff754e4986c,0x7ff754e49878
                                                                                                                      11⤵
                                                                                                                        PID:8160
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"
                                                                                                                7⤵
                                                                                                                • Executes dropped EXE
                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                PID:3296
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe" --version
                                                                                                                7⤵
                                                                                                                • Executes dropped EXE
                                                                                                                • Loads dropped DLL
                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                • Enumerates system info in registry
                                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                                PID:3408
                                                                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x268,0x26c,0x270,0x244,0x274,0x374b80,0x374b8c,0x374b98
                                                                                                                  8⤵
                                                                                                                  • Executes dropped EXE
                                                                                                                  • Loads dropped DLL
                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                  PID:4788
                                                                                                      • C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                                                                                                        "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
                                                                                                        3⤵
                                                                                                        • Executes dropped EXE
                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                        • Suspicious use of WriteProcessMemory
                                                                                                        PID:3300
                                                                                                        • C:\Program Files\Java\jre-1.8\bin\javaw.exe
                                                                                                          "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"
                                                                                                          4⤵
                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                          PID:4952
                                                                                                          • C:\Program Files\Java\jre-1.8\bin\javaw.exe
                                                                                                            "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Dfile.encoding=windows-1252 -jar C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                                                                                                            5⤵
                                                                                                              PID:5832
                                                                                                              • C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe
                                                                                                                C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe -Dsun.java2d.uiScale.enabled=false -Xmx1536m -Dfile.encoding=UTF8 -Djava.net.preferIPv4Stack=true --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.time=ALL-UNNAMED --add-opens=java.desktop/java.awt=ALL-UNNAMED --add-opens=java.desktop/sun.awt.image=ALL-UNNAMED --add-opens=java.desktop/sun.java2d=ALL-UNNAMED --add-opens=java.desktop/java.awt.color=ALL-UNNAMED --add-opens=java.desktop/java.awt.image=ALL-UNNAMED --add-opens=java.desktop/com.apple.eawt=ALL-UNNAMED --add-opens=java.base/java.util.regex=ALL-UNNAMED --add-opens=java.desktop/javax.swing=ALL-UNNAMED --add-opens=java.desktop/java.beans=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.network=ALL-UNNAMED --add-opens=javafx.web/javafx.scene.web=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.event=ALL-UNNAMED -cp C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\annotations-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aopalliance-1.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\arns-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-query-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-xml-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checker-qual-3.12.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-compress-1.23.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-io-2.11.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-lang3-3.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-1.1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-api-1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-vfs2-2.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\crt-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\desktop-common-util-1.268.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\DiscordIPC-0.5.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\dnsjava-2.1.8.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\endpoints-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\error_prone_annotations-2.18.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\eventstream-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\failureaccess-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\filters-2.0.235.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\gson-2.13.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guava-31.0.1-jre.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-assistedinject-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-eventstream-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-client-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-download-1.268.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-fluent-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-h2-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\identity-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\j2objc-annotations-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jackson-annotations-2.13.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jakarta.inject-api-2.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\java-image-scaling-0.8.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javax.annotation-api-1.3.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-api-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-core-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-impl-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jcl-over-slf4j-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-20230227.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jsr305-3.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-native-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junrar-0.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\log4j-1.2.17.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-classic-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-core-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\lombok-1.18.30.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-api-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svn-commons-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svnexe-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\metrics-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\MinecraftServerPing-1.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\mockserver-netty-no-dependencies-5.14.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\modpack-dto-2.282.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\picture-bundle-3.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\plexus-utils-1.5.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\profiles-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\protocol-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\reactive-streams-1.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regexp-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regions-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\s3-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\sdk-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\skin-api-1.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\slf4j-api-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\statistics-dto-1.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\third-party-jackson-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\tlauncher-resource-1.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-lite-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\xz-1.9.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\original-TLauncher-2.9371.jar; org.tlauncher.tlauncher.rmo.TLauncher -starterConfig=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\starter.json -requireUpdate=false -currentAppVersion=2.9371 -starterDomainAvailabilityV1=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\domainAvailability.json -country=${country} "-starterJVM=C:\Program Files\Java\jre-1.8\bin\javaw.exe" -starterWorkingDirectory=C:\Users\Admin\AppData\Local\Temp -starterJarFile=C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe -starterFileEncoding=windows-1252 -runVersionWithServer=empty
                                                                                                                6⤵
                                                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                • System Time Discovery
                                                                                                                PID:7160
                                                                                                    • C:\Windows\System32\GameBarPresenceWriter.exe
                                                                                                      "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                                                                                                      1⤵
                                                                                                      • Network Service Discovery
                                                                                                      PID:3376
                                                                                                    • C:\Windows\system32\OpenWith.exe
                                                                                                      C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                      1⤵
                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                      PID:468
                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                      1⤵
                                                                                                      • Drops desktop.ini file(s)
                                                                                                      • Checks processor information in registry
                                                                                                      • Modifies registry class
                                                                                                      PID:1404
                                                                                                    • C:\Windows\System32\GameBarPresenceWriter.exe
                                                                                                      "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                                                                                                      1⤵
                                                                                                      • Network Service Discovery
                                                                                                      PID:3856
                                                                                                    • C:\Windows\system32\OpenWith.exe
                                                                                                      C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                      1⤵
                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                      PID:4260
                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                      C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                      1⤵
                                                                                                        PID:5932
                                                                                                      • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                        C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                        1⤵
                                                                                                          PID:4560
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                                                                          1⤵
                                                                                                            PID:5604
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x178,0x17c,0x180,0x174,0x184,0x7ffe484a05a0,0x7ffe484a05b0,0x7ffe484a05c0
                                                                                                              2⤵
                                                                                                                PID:1588
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                                                                              1⤵
                                                                                                                PID:8164
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff754e49860,0x7ff754e4986c,0x7ff754e49878
                                                                                                                  2⤵
                                                                                                                    PID:4808
                                                                                                                • C:\Windows\System32\GameBarPresenceWriter.exe
                                                                                                                  "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                                                                                                                  1⤵
                                                                                                                  • Network Service Discovery
                                                                                                                  PID:8124
                                                                                                                • C:\Windows\System32\svchost.exe
                                                                                                                  C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
                                                                                                                  1⤵
                                                                                                                    PID:7112
                                                                                                                  • C:\Windows\system32\OpenWith.exe
                                                                                                                    C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                    1⤵
                                                                                                                      PID:7784
                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                      C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                                      1⤵
                                                                                                                        PID:8100

                                                                                                                      Network

                                                                                                                            MITRE ATT&CK Enterprise v16

                                                                                                                            Replay Monitor

                                                                                                                            Loading Replay Monitor...

                                                                                                                            Downloads

                                                                                                                            3903daac9bc4a3b7.timestamp

                                                                                                                            • Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
                                                                                                                            • Size 46B
                                                                                                                            • SHA256 70b8737051c4a512902c03790601d6d3c4aed5acf8d9eb1f9e3fd6f446150c62
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                            • Size 471B
                                                                                                                            • SHA256 72c5c49118bdd44b9bd33f21a899efba0abaae74fc122115f402e85a4c99caf1
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                            • Size 416B
                                                                                                                            • SHA256 6ffcee80827fd05c8b3a2d0afbe0aa863bab42502a85070b7e851a0e0dd4d739
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            data_1

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\data_1
                                                                                                                            • Size 264KB
                                                                                                                            • SHA256 9295affce812afbe1f37f822d460fa7bd6c52e8afd2db1452d59c31d7fc7a11a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            133.0.5932.39.manifest

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\133.0.5932.39.manifest
                                                                                                                            • Size 225B
                                                                                                                            • SHA256 0f5ab8c7090e4b3da7db456cbb8993121060d5e172f58c757f9771cbef70b87b
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-100.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-100.png
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-100_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-140.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-140.png
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-140_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-180.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-180.png
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-180_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-80.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-80.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-80_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-100.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-100.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-100_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-140.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-140.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-140_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-180.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-180.png
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-180_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-80.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-80.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-80_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                                                            • Size 901B
                                                                                                                            • SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            assistant_package

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\assistant_package
                                                                                                                            • Size 3.6MB
                                                                                                                            • SHA256 5a68392ec016acfc72ec4e168ec0f07f2b997a7556ab648d2ed6f7c99d4203ea
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            installer.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe
                                                                                                                            • Size 9.1MB
                                                                                                                            • SHA256 75d337be6e3e09f8186fea427928e6cdced8249f1cda03cd823c2de715f446b2
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Opera GX Browser.lnk

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\Opera GX Browser.lnk
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 a401d588d78e583233212f56512c4f73d1b39ac142c42bf3c1d72d0f6a6121dc
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            additional_file0.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\additional_file0.tmp
                                                                                                                            • Size 2.8MB
                                                                                                                            • SHA256 0f50bda78a34e09ccfd5e33a7958de9eebe9863cc3d875e8b9c52dec3f3a9992
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            assistant_installer.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe
                                                                                                                            • Size 2.5MB
                                                                                                                            • SHA256 e86907d20a18c6b99e270a4422e0c279079e8a118b6bd7fbb4001161ddc881f4
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            dbgcore.DLL

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\dbgcore.DLL
                                                                                                                            • Size 196KB
                                                                                                                            • SHA256 a2777992696c953c001dabade3f236f731987b58061efd8c894815f9939f979c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            dbghelp.dll

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\dbghelp.dll
                                                                                                                            • Size 1.8MB
                                                                                                                            • SHA256 102419e70ed462dd1ef4a30d94b714c4317ea838d7acc85ae030dfca19f609ab
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            installer_prefs_include.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\installer_prefs_include.json
                                                                                                                            • Size 227B
                                                                                                                            • SHA256 97331f17409895395d817dd6dab7119ff107665a9f866a3c2926bfa9ada6b1b7
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            installer_prefs_include.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\installer_prefs_include.json
                                                                                                                            • Size 242B
                                                                                                                            • SHA256 40ea1fbf69784552a6aca6f03f95b7ec4c38332d39c88322835c70b661d643dd
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            installer_prefs_include.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\installer_prefs_include.json
                                                                                                                            • Size 967B
                                                                                                                            • SHA256 07747e3bf413909ecb4b6a3ed25adcb9ac6819dd035c8084f1ff538123d71cdc
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            installer.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exe
                                                                                                                            • Size 9.1MB
                                                                                                                            • SHA256 89317570d2f475fcd42f1ec82b895c2f27bf58afd357832c8c8b4ad0a5e48e0c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            200.ico

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico
                                                                                                                            • Size 116KB
                                                                                                                            • SHA256 9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            BrowserInstaller.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe
                                                                                                                            • Size 3.7MB
                                                                                                                            • SHA256 e20f18d8c5d3621a81d35fe43d759ddb148e35d1856a94fbe95dfbec93127a10
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            IRIMG1.BMP

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.BMP
                                                                                                                            • Size 12KB
                                                                                                                            • SHA256 1d7a67b1c0d620506ac76da1984449dfb9c35ffa080dc51e439ed45eecaa7ee0
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            IRIMG1.PNG

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.PNG
                                                                                                                            • Size 45KB
                                                                                                                            • SHA256 a42ab4d62c5a5286202df15f9ad32b22396d5d12c7a4db8c5a2c98f90160ade1
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            IRIMG10.PNG

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG10.PNG
                                                                                                                            • Size 206B
                                                                                                                            • SHA256 348e3f3544cca4c9ca2af323fa8b3453a70ea421c82b331681dc1d4ef74921f3
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            IRIMG13.PNG

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG13.PNG
                                                                                                                            • Size 41KB
                                                                                                                            • SHA256 1708790d5496b9cc325cc0249cfa272aac3c3738188fc41eef83e8592de247ff
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            IRIMG14.PNG

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG14.PNG
                                                                                                                            • Size 43KB
                                                                                                                            • SHA256 6528bb11becf79c17c77a9c6624b82074b9dd6d3e932852c8fe1da22a57854aa
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            IRIMG15.PNG

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG15.PNG
                                                                                                                            • Size 644B
                                                                                                                            • SHA256 207bd7ad2eb7f48a2a1be1253363fa120ae79e25eacbd37d6b9be52d2128bfdd
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            IRIMG17.PNG

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG17.PNG
                                                                                                                            • Size 40KB
                                                                                                                            • SHA256 06fad383e3506eb1be52877bee839b833de157a2601af1c443ef1244a92f5d8f
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            IRIMG2.BMP

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.BMP
                                                                                                                            • Size 12KB
                                                                                                                            • SHA256 9c893fe1ab940ee4c2424aa9dd9972e7ad3198da670006263ecbbb5106d881e3
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            IRIMG3.BMP

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.BMP
                                                                                                                            • Size 12KB
                                                                                                                            • SHA256 4c85cdddd497ad81fedb090bc0f8d69b54106c226063fdc1795ada7d8dc74e26
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            IRIMG3.PNG

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.PNG
                                                                                                                            • Size 475B
                                                                                                                            • SHA256 d339d7a5fcaff72292150f3c7db87a73caa396e23224b570e053c8bb96a3a897
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            IRIMG4.BMP

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG4.BMP
                                                                                                                            • Size 451KB
                                                                                                                            • SHA256 64da5bd044908b2c3a725c5a55edec1644be498f41ea05d42a6ae8cd797f1d80
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            IRIMG4.PNG

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG4.PNG
                                                                                                                            • Size 368B
                                                                                                                            • SHA256 3207283d0abc0dd36c0991b40a738247394bbc92e5696eb790a5c888a9f28106
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            IRIMG9.PNG

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG9.PNG
                                                                                                                            • Size 438B
                                                                                                                            • SHA256 d16a8eaf8f979e45bacbbd8ef14afe482d74e926dff2e87e569342874ba34145
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            IRZip.lmd

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
                                                                                                                            • Size 400KB
                                                                                                                            • SHA256 3a6794c90d69383bd76098992cb512ae343cb2e1a3680dd4794e49895472b429
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Wow64.lmd

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
                                                                                                                            • Size 252KB
                                                                                                                            • SHA256 27b48727237cd0f8a1205e01e5c93cbe6c7a2f3938faf8d8daa5191094c347a5
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            irsetup.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                                                                                                            • Size 1.8MB
                                                                                                                            • SHA256 96070b2d82b6bffd54719f9753909be5f5151edbd5b37b26f50dea2e995ea430
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            lua5.3.dll

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.3.dll
                                                                                                                            • Size 395KB
                                                                                                                            • SHA256 eef58c3dae331da03872b973230aa56b40e34035035cca5b468eda0c40daa819
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            irsetup.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                                                                                                            • Size 1.7MB
                                                                                                                            • SHA256 ea04ee2883ca5dcb461ea894a4e2def7d0c89f11d9f06f3bae020f6a25e7b75d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            lua5.3.dll

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.3.dll
                                                                                                                            • Size 395KB
                                                                                                                            • SHA256 0e43d22649d6b2ecbac9915dc6498fe1f41777dd33147d962b30dad0d5e76ab3
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            opera-installer-bro.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                                                                                                                            • Size 3.9MB
                                                                                                                            • SHA256 651826b0daf0cc5f50c4dcf97735e44f1634480a420ee710663903b0e1107754
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            setuparguments.ini

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
                                                                                                                            • Size 764B
                                                                                                                            • SHA256 1ffce52d9b3b21f177113bc62cd6841c9d9ef818c06a4d72033173a330c1675e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            TLauncher.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
                                                                                                                            • Size 9.2MB
                                                                                                                            • SHA256 8cdc16a8f34f99dc85273838350ae9a9a840de8c6dda3c045c5514520842dd78
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            uninstall.xml

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                                                                            • Size 21KB
                                                                                                                            • SHA256 15cdca6a11c95f616290e91bbc1e381e1d6675fcd5e4ea8a2549d82da813028d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            uninstall.xml

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 1f4581b038ac80aca31c1bf1657f4065e91c3b3c750da108d19a6d7bc95da715
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            uninstall.xml

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 a14aabf96798ec24f6e314d95e24906a4838ec2c6a7ca2aa57f3b52083a19529
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            uninstall.xml

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                                                                            • Size 6KB
                                                                                                                            • SHA256 31881fed73ed13b373abb3874df09c53cd4b69a456592e784e045a4c982109c5
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            log.2026-07-20_12.log

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\logs\starter\log.2026-07-20_12.log
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 c4dfdda3c1510257ded4768620ebbcff0d56e9353b50769ece3432955cc41192
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            dependencies.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9371\dependencies.json
                                                                                                                            • Size 25KB
                                                                                                                            • SHA256 234df7a7768bb58ddfc7d35eb0f44ab0b2c9400f4dc956fa51bfbf776bb3c86a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            resources.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9371\resources.json
                                                                                                                            • Size 17KB
                                                                                                                            • SHA256 44c898c6684ab882a034f02cf8193c3777adea8bb009749c05697a00bf8ee2e4
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            appConfig.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\appConfig.json
                                                                                                                            • Size 4KB
                                                                                                                            • SHA256 ae102a86f96ea31bcbe9e7110c7a8d6a067e02107aefa0dca3244c8ecc5cc86c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            javaConfig21.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\javaConfig21.json
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 4e677c3608065a9a12f97bededc27fd440711f94288012207645df37f516d699
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            starter-core-1.268-v6.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\update\lch\starter-core-1.268-v6.exe
                                                                                                                            • Size 9.2MB
                                                                                                                            • SHA256 f0cb809918c2bf85a8eef2bcbd35218e75426b4e5698ca1cca50acf3e5a714ce
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            COPYRIGHT

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\COPYRIGHT
                                                                                                                            • Size 35B
                                                                                                                            • SHA256 7afb3a2dc57cb16223dddc970e0b464311e5311484c793abf9327a19ef629018
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            LICENSE

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\LICENSE
                                                                                                                            • Size 33B
                                                                                                                            • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            ADDITIONAL_LICENSE_INFO

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ADDITIONAL_LICENSE_INFO
                                                                                                                            • Size 51B
                                                                                                                            • SHA256 0a256a7133bd2146482018ba6204a4ecc75836c139c8792da53536a9b67071d4
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ASSEMBLY_EXCEPTION

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ASSEMBLY_EXCEPTION
                                                                                                                            • Size 46B
                                                                                                                            • SHA256 a4b7ad48df36316ddd7d47fcecc1d7a2c59cbfe22728930220ef63517fd58cb0
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            LICENSE

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\LICENSE
                                                                                                                            • Size 35B
                                                                                                                            • SHA256 01a4ebd2a3b2671d913582f1241a176a13e9be98f4e3d5f2f04813e122b88105
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            9b3f98d0-72c2-492d-8703-05f993089564.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\9b3f98d0-72c2-492d-8703-05f993089564.tmp
                                                                                                                            • Size 151B
                                                                                                                            • SHA256 bf5decd6bd9d4e6f6d3ea6b6f64ea979c83a60e0007ef8164af714b4aebd2aea
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            settings.dat

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                                                            • Size 40B
                                                                                                                            • SHA256 47b2b1f66f5febde625e234192690a74c72e94777e847560d9252983a9bc9072
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            0323b567-eaea-41e0-a452-45f14fa54d53.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\0323b567-eaea-41e0-a452-45f14fa54d53.tmp
                                                                                                                            • Size 414B
                                                                                                                            • SHA256 ee36c6abea4a3c331f51078206d71a95999b58bd51146f2d33922821db0daeb4
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            3b6dc9e9-87af-4bb4-bf58-0a47ad4af6b4.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\3b6dc9e9-87af-4bb4-bf58-0a47ad4af6b4.tmp
                                                                                                                            • Size 173B
                                                                                                                            • SHA256 296aa1e1bb1b773bcb732b9b17548044bdb07706c13b4fb7f7d4e6660d8fa274
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            570bc411-0697-4487-9521-9b3b53f7d6f4.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\570bc411-0697-4487-9521-9b3b53f7d6f4.tmp
                                                                                                                            • Size 162KB
                                                                                                                            • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            756c868d-c1ab-4de0-a1c6-cd4d963e13a4.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\756c868d-c1ab-4de0-a1c6-cd4d963e13a4.tmp
                                                                                                                            • Size 171B
                                                                                                                            • SHA256 05de64944edfffb7b5e78c4cbc96a9281861f139fc345badd3dc48a1361a7f70
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            77c0314d-ae23-447b-8aba-91e44c4f6f59.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\77c0314d-ae23-447b-8aba-91e44c4f6f59.tmp
                                                                                                                            • Size 20KB
                                                                                                                            • SHA256 3dd5b089f2646d8cc465cfcc9e32d0dbd07eee8725cba2f287aeef28bbdc20c4
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            924cfdca-19df-4f1c-bd0c-d8eaf14c597a.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\924cfdca-19df-4f1c-bd0c-d8eaf14c597a.tmp
                                                                                                                            • Size 12KB
                                                                                                                            • SHA256 df7e94c4a3385931f4430acdb9c5919b0d6fae5836ae84235df2886b81ef034d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Bookmarks

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks
                                                                                                                            • Size 24KB
                                                                                                                            • SHA256 439a20beb884b9555ba10527f9aa49ef89c317c119f879436263e44c610f82b4
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            78692989-f8e2-473c-a1e5-fae4dba7f337.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\78692989-f8e2-473c-a1e5-fae4dba7f337.tmp
                                                                                                                            • Size 48B
                                                                                                                            • SHA256 5de919d0d6e61829859ec70fd4f8af062332089a3e3699738d75ab1ce8c93a25
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                            • Size 600B
                                                                                                                            • SHA256 3ba553573271c6697aa3c704286ea995e85c605c42912b68aae64cbc69e37b77
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            CURRENT

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\CURRENT
                                                                                                                            • Size 16B
                                                                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            MANIFEST-000001

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
                                                                                                                            • Size 41B
                                                                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            31cf140d-f616-417a-a554-c60c5199d0c1.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\31cf140d-f616-417a-a554-c60c5199d0c1.tmp
                                                                                                                            • Size 59B
                                                                                                                            • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Network Persistent State

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                                                                                                            • Size 4KB
                                                                                                                            • SHA256 f8edaccfef33001039d5bcce50b55a2bd6315e1613434fd728bc629ac0b30745
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 201674f537521f82248037201b8f76014499438999c0d036db1444dc5f9c3ea5
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            09e2e8f7-fabd-4dce-8ee1-d71859cb8130.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\09e2e8f7-fabd-4dce-8ee1-d71859cb8130.tmp
                                                                                                                            • Size 72B
                                                                                                                            • SHA256 16350dc22eb0c532473c984d4f7a06f66a02b2392ca09f883ae29c475548ce74
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                            • Size 72B
                                                                                                                            • SHA256 f9391a9578cade70381f7384b2a8730832625d2c5602fce84a195617ffbff094
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            050d900d-8cb8-4084-be52-edaed5cd693c.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\050d900d-8cb8-4084-be52-edaed5cd693c.tmp
                                                                                                                            • Size 381B
                                                                                                                            • SHA256 5f55f4b6e6909c0e2f92bd32415cf8b6763d80332a080d3686f177a4045fcda8
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 87878df4facfcd7a8f5448f0c864940ee53da11e3b9ee390f8eb0ea459049931
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 4c7a2927f798147a54bc8222ae44320e235e346eb2ac8662b312502cb49f5e5e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 1ae5bfd485c9bd77a060fe0bbb20d7f842ed092314d4c6901076a2343873b11e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 bb80b03c0641498917fe4a9d5a8590f0e5ac7c501a7fd286eb78207354a6ea93
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 385c74f612afb144e572ee89d3dc6d2f4280fd5880e38059872a1d4018eb806d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 7KB
                                                                                                                            • SHA256 1145831dcb924f26a1d10258f32af4fddefb216b350a4aeed62d38fec91aacda
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 aeeaa6e2de5fdc752af114f3b8f0fcae23060203cac53002c8c802524ca20e84
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 070fc927b65109b720eb0cd9049e2841122ed78794a5ac060256291420153e0e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 ca6687332a4252486365c189cf08fd4e9c0d20f191f94792b8ae39453c7a9fea
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 462eaadb131964a6b0d0ad7a6af1e2530dd1ebf95e36cbc9d0edd5cdeede8c01
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 7e20a99981613de45120923ddfa670c2afd538d58f8734c4c5e240294a21b220
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 39feebcbdbcfa331968471681d15d5a69b08f8fc0122c03aff1563a1ae659b1a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 493B
                                                                                                                            • SHA256 ecd0c178f7c32736501fb43026cdedd2ef46c904dab5dac5a677208219fb367f
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 2e49ee99777a8639db774657cee5b1e3c5b31774754240392d5e0d3ef72218fe
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 6772aea0c5213a05f8e4b4932c27b7ae95d5d551bf769a1e29043b43a15be89e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 476de8bb17557598ccc0bb384d6324c8f80113d83fb5b05cae9c038ffd5182d3
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 3930115b89ad481d80be6348550404948c62aeeeb7c01a1d08ef39f9e1647a38
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 3468c878d9c16842d12fa975c2474c176da796bd52c010434ccaab33a1502b42
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 d3dfc9efee8ac4a7d4c632f075809503bbb053b3e18caadd322abd85633398d6
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 a71b3734dd30ce1ad74fd2bb32d7d203f3bdd2c06e2528cdc85aa725f3288d7e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 5ce81e46c22fdf7deac59712166acd304fb26b918e1fdec6e1f9fc247d0d3a48
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 74b0b17525476028ccbbaa34b0676164957d024682f82f99179fe11773b26029
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 158c57da9cc2bc52ac536fda9c83762fe059791e42824b63aaf7aca80fc3970f
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 d056bddf3f65bd41540ca8de00612f6635b24a8ea46583f860856212a9ffe2f5
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 0f68e1ae72d15ab5e748b6c0452bb63308829ffbaabce120d1d4b6c3e324ad77
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 7d527f1259c97c0ab0080a51b6027b0ddc71e8800adb2c11faa0180ea58f0ac7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 25b7fb8f480dea30d7e0d520d93413693f656b58cf6bed6e74326008bf94242b
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 797d704fb7d14dc8c6ada982edbe3b63104ecd9e13681f480f95247b6b61cd59
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 1863fe9fad0d43241bafbfb8a1fe534e1a3a1545037346530b06766c5ece96d0
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 3d82d16a037ab9881fb55cb865938b31f178e384bbc665a315418dd3c725fb48
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 605B
                                                                                                                            • SHA256 2e368af4f864ee44a50ab07c9483da7c0485f3743b53be09fac3ebeeb5fc9fc6
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 733B
                                                                                                                            • SHA256 a715831da4a57dbd6e43cce63171461b4f1fece07d11bf6dd976d8d62ad6946e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 909B
                                                                                                                            • SHA256 afd646b2aa80bbc525239a19e4c7bb0001e1dc7664a38a7e86001d33a11f9093
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 7adcb1497e1d3f13c9d05683169ce9a36258ba7083cd6f1e0bc1cde15f56c7b4
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 4c6a9a58268ab59f153c499cb2487691b2e829f01aee5fe023999229ac496e7f
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 35c51bfdb982c2271a5bcaf4ba720b69a36d6c5a2422fc11eb5672baec5ef1c3
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 1a98de324bfd10661d74ccfb0f942d80cee3308b13a5beb4a18e1143bf840594
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 5e08558aa134e40415c1e4d19901b96f4dc332480a09359158eb9faae3d0ac98
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 7ea546603567dd1eb3aafe055537e243f3c52dbc9453492f52c0a144c58a2cda
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 f3248a43ede963a91196a268099377d3612b12e11fbae8472baa08f8209b7f34
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 7a6444ad2847a73ab897b464e2f969abdc074941887e3ce14acbc7e6081f9f55
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 60cb144f6f3de69c0a7020057a4cba704482d1edc6a1c7bca9493b8d2da69ddb
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 dc50c9d42ef07525e04c0a7bd95aaac7c718b5e79d6a8bd1ff9a3b1487cc32f1
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 e354e4b8c2f2511863677e6fb13decb17e8c931060088b495439a0e995b3c5c2
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 31535b311d38b7eff1a7e22791ed451218e5ecc78161d0782708a4426bfcfe54
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 3f49563317e64dc5ca69fb08f59c5ef6202da3cc387f7151cf9b49c89aa3f4f7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 cf5cdfd8804f12ce7c6c5e4e7e25e58e8d849fd75db7d75bd93302914fd0a10a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 e6498d318e0ee44176f55dcab2dadd55a4a5f84e35ae686f3e832911fd8496ac
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 93bf4ef878b4e77126d1a9fd11936f97fa8c327e9123f8c66808b69a3d53ac13
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 48ecf112d54aeb4743dbeb34a732806c7c5995e3dc6e57d37947f7484b730b37
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 db785781bdd4f673cf6e5b2974f365e0b376473a35acb11140269f1fa59b60c4
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 26a35673a30bc166b2b053db729dedf8875ee1fbfb583500b57501ee88d647cb
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 19d408547d9fe4c093ec449c71d426b0282b5fd205223c1a36f8cab39f228af3
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 fd5c8ca8c047f64304661d3be28a68ee962851009d6fbca1fc63cbcefaf43a8a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 ea8045cfad050b9d9291bf6064762ca59a245f972f572861befb3bbbc90bcc63
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 7fa4a9c003cf157485215c4464152cff34df738a8d3cfc9dad3545891189326b
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 7KB
                                                                                                                            • SHA256 9fb247c00bdda7de0aa56d868ac195ae84f57eb7cd9d4cd94497c596c7a6e1bb
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 b58d5ad3e9d729de7e1ba5dd39fe1647008c4fd2138afc386b6d02ef7b408218
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 7KB
                                                                                                                            • SHA256 0f23a9fd23800f2bdf5c627115a47ac59caf4c6be906b5eed3f5989f7e0397ba
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 8ef7db0c3ad2d9277d939dbb2efc0e8207e8bf013eef234a1ea1f9acaff49da2
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 719b679423b37620c6db6455b3f22f96ef8eb57901ed37bdde6b7238c63b8649
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 62faf7418f82df5ceb534201d21760c43e16a3b26a0361471c4bc9b0777c185c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 507B
                                                                                                                            • SHA256 792f8d9ba79579c7948fcbf6be9e775675f353d94be91da37f38e1e746f77c8f
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 599B
                                                                                                                            • SHA256 e26d9ce88954ba0289cdf6be073c62a0f554e3d3d6ca0d3cf126f3252c49224c
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 780B
                                                                                                                            • SHA256 2113682736f3581637a3fae8a51e6caf339fb7742df69a9533bd76230e4d5143
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 871B
                                                                                                                            • SHA256 b8748831a38eb36f900b7052f6e428221de95d85a7efe823dcbbed222a313840
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 8cfecebd04a7ddc1ef2f4d01e2dabf0cf8c3b6b734305f1de0abe00b3a2e722c
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 7b25892fd7680b504fc12e22e1c934d35bd3c2447ed6764f451581fc2da7be39
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 b3a699ceeab8cb8cde2e70036915c467f0f0344fec75ce253f1c90802b667852
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 737a6d795d796b616dcf4288d0cb4400f8b006953d8cc5e29c1d505a863c50cc
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 e5699027d60177d7523e2952121ada4a2d57bd4f68ee2ad18e19ba4b3a1a5b74
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 f19059983480b3305c696263bf3d41b400cf7bc65a6cd9cf45d78b67e0664fa3
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 1ecbf31dda603aa9d4e9b0e5f45a84d76c0f7a5f1534692add386639eebfc2fd
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 669d47357893fb08cb9a1cb449c3e485b785f87a31572cdb6250302a7680a23e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 5b8503eab1c75e7f25c5a8a835691d480d3dc10a771c9956338a15bf08e122ca
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 691B
                                                                                                                            • SHA256 2be02fce886bf8f13f2c13fa569813e5770840c2154aae75d904de9fdc4bff27
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 971B
                                                                                                                            • SHA256 ea0dcb176da7b582408ae2e6ddc404899703c22c5326363520a46ebb4a61d2b9
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 313424721b2001ea9ead180b542fc752f0bb274cfdf72c1918fa26d39139635f
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 8937659c4f025df0a205ca430e0eca5651c64b06a9f8ccd2eb3f2a44b15abbcc
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 29bd23e91cd965d7c4830601055baa4455edc2d85eb0b4eaf4099266521248dc
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 dad31476d9bed16cb560a72783ff5cd0156728d22acb4440bd1d8debeef6d1c1
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 7ec8442b3540a0c38da811b37cdac880038ca07f75b7a8aa1e6ae513bf642a50
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 611c746c19992ba96ff7b9481c732d2a405dbdfd00d647587ff479c68c668690
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 215d8ed9045f442622daf2076efe133e11e1d9d1828da1651f93e2d145105984
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.0.1137936813

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 30f0cb3866b37d74052d36589d3e86e5503bd069ecb628f1a802e9d8daa39af1
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.1.1723350346

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
                                                                                                                            • Size 378B
                                                                                                                            • SHA256 3b2778a41bc482682c6da8fba11468d056fc691c4d73d83f24c8314dc8ff0753
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.1.1723350346

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
                                                                                                                            • Size 538B
                                                                                                                            • SHA256 25e020d16af0746c22c4be61f0460fafe46567a63e64a4d17a0ce98f5ee4a505
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.1.1723350346

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
                                                                                                                            • Size 476B
                                                                                                                            • SHA256 b24248e33df8c03557cf45ed76aeba1f62c54473b620695a3306362033cc1042
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.1.1723350346

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 9938e6d91ca079df5a733abb3127ca2d04459880c6fb1ac99ce24546b0e95a62
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.1.1723350346

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 cfefbceaddd5262939c2566c499d855018faba3c587859a6311665556e88a6f5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.1.1723350346

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 6767bcb4f9491724b303007dd4db3a240a993e597e6c6282364c70d67a48952b
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.1.1723350346

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 5185aa87e73191ee7d0f5b58e3a8d5d91311eea02be84e7d8f9d162dadbefea3
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.1.1723350346

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 370e478dce66d0dea173f3d0abbb7b388b9f3af4a3ef2ba5636f7aa87dcb471b
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.1.1723350346

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 99b128ce65c5418cce300842c6b3aa9473d5de76b9631b213854eb885916b3ef
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.1.1723350346

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 7112c6be40cc3449feacb64d76ccb7f5a8f15240b58746d9de70b51992f7264c
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.1.1723350346

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 1bef70c9ed4ad6ec0b07f8d9a289c36dbe11d165e46e00a17fe9b0537ad1b24d
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.1.1723350346

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 71c6507feccb7f562fe06f9e2d8b75ec606ad45894bc40dce206a3b26c523cd5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.1.1723350346

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
                                                                                                                            • Size 224B
                                                                                                                            • SHA256 8f3eebd54282eabde15da6628fc0f17c4bfab9a306738e30122cf94974781088
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.1.1723350346

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
                                                                                                                            • Size 200B
                                                                                                                            • SHA256 dd47a04aa6956220768c4ab08b4afde091d11c087292fb2d9747ddd1002be8c5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp3328.2.603461039

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.2.603461039
                                                                                                                            • Size 217B
                                                                                                                            • SHA256 9e5f37c5e921e618f54a45edd14ea5d0d2f7245a684a290253707cbbbabb465c
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            data_0

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                                                                            data_2

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                                                                            data_3

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 512d14272f05a27a622cf687df00e739af2fcb563b32058091c461d6a2a667de
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 cd36952fc70d3103ac8c9e330f26c58677d35f789c1337590abf049a5315f52e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            assistant_prefs.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json
                                                                                                                            • Size 151B
                                                                                                                            • SHA256 fed94ef0ae640756050b407b903767909a2091e196235b0b8ef15a9d5b56b272
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            desktop.ini

                                                                                                                            • Path C:\Users\Admin\Videos\Captures\desktop.ini
                                                                                                                            • Size 190B
                                                                                                                            • SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            memory/1404-2059-0x0000022F8FD10000-0x0000022F8FD56000-memory.dmp

                                                                                                                            memory/1404-1860-0x0000022F8FD10000-0x0000022F8FD56000-memory.dmp

                                                                                                                            memory/3300-1325-0x0000000000400000-0x0000000000420000-memory.dmp

                                                                                                                            memory/3328-3144-0x0000021F699F0000-0x0000021F69A46000-memory.dmp

                                                                                                                            memory/4220-2166-0x00007FFE810F0000-0x00007FFE810F1000-memory.dmp

                                                                                                                            memory/4220-2165-0x00007FFE81390000-0x00007FFE81391000-memory.dmp

                                                                                                                            memory/4688-661-0x0000000000B30000-0x0000000001127000-memory.dmp

                                                                                                                            memory/4688-3790-0x0000000000B30000-0x0000000001127000-memory.dmp

                                                                                                                            memory/4688-1346-0x0000000000B30000-0x0000000001127000-memory.dmp

                                                                                                                            memory/4688-1799-0x0000000000B30000-0x0000000001127000-memory.dmp

                                                                                                                            memory/4688-599-0x0000000000B30000-0x0000000001127000-memory.dmp

                                                                                                                            memory/4688-2411-0x0000000000B30000-0x0000000001127000-memory.dmp

                                                                                                                            memory/4728-1336-0x0000000000D40000-0x0000000001341000-memory.dmp

                                                                                                                            memory/4728-1310-0x0000000000D40000-0x0000000001341000-memory.dmp

                                                                                                                            memory/4728-1293-0x0000000000D40000-0x0000000001341000-memory.dmp

                                                                                                                            memory/4728-656-0x0000000000D40000-0x0000000001341000-memory.dmp

                                                                                                                            memory/4728-577-0x0000000000D40000-0x0000000001341000-memory.dmp

                                                                                                                            memory/4728-11-0x0000000000D40000-0x0000000001341000-memory.dmp

                                                                                                                            memory/4952-1833-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1556-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1837-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1832-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1824-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1806-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1583-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1553-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1555-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1804-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1789-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1762-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1537-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1543-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1761-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1554-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1740-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1337-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1341-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1722-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1434-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1489-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1706-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1502-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1501-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1693-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1700-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1559-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1534-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/4952-1524-0x000002DA82460000-0x000002DA82461000-memory.dmp

                                                                                                                            memory/5832-3204-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3106-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3122-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3138-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3142-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3146-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3164-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3163-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3158-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3176-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3151-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3193-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3184-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3218-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3215-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3213-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3189-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-3200-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp

                                                                                                                            memory/5832-1940-0x000002CA8DC20000-0x000002CA8DC21000-memory.dmp