Resubmissions

05/08/2026, 12:29

260805-pn13gsssfy3

05/08/2026, 10:02

260805-l2ws5she326

05/08/2026, 10:02

260805-l2whdayzhy

01/08/2026, 07:31

260801-jcfdrafp4y8

29/07/2026, 10:25

260729-mf8q9a1gka3

29/07/2026, 10:23

260729-meszeatvex3

28/07/2026, 12:06

260728-n9rv9sgr9w8

27/07/2026, 10:07

260727-l5skwszepb7

Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    902s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    01/08/2026, 07:31

General

  • Target
    sample
  • Size 22B
  • Sample260801-jcfdrafp4y
  • SHA256 f5faa40e5206e9eb8f39d3ebbdfe2d9457ff780e4946f9add61356012433082d
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • Downloads MZ/PE file 5 IoCs
  • Checks computer location settings 2 TTPs 26 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 7 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 62 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
  • Opens file in notepad (likely ransom note) 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 42 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\sample
    1⤵
    • Executes a command shell one-liner
    PID:4312
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Checks processor information in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:472
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fffccd6c728,0x7fffccd6c734,0x7fffccd6c740
      2⤵
        PID:4636
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,7316357823381005188,11111100534032244742,262144 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1956 /prefetch:2
        2⤵
          PID:2788
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,14158904728564686284,8989596897617690937,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2044 /prefetch:3
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:3272
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,14580247464301939261,7618051580017726664,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2580 /prefetch:8
          2⤵
            PID:4320
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,3770990664188627978,15549690443130827464,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:1
            2⤵
              PID:4332
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3340,i,14422923212786377392,8168245130944146773,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3360 /prefetch:1
              2⤵
                PID:3304
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4472,i,17611916878918794334,12965311584487784701,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4488 /prefetch:2
                2⤵
                  PID:2180
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4748,i,3509019487749699072,4074293143618619367,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4760 /prefetch:1
                  2⤵
                    PID:2896
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5532,i,2019777621127903170,7812501242652695787,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5512 /prefetch:8
                    2⤵
                      PID:2408
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5820,i,15335096453515457345,15296334268615665547,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5788 /prefetch:1
                      2⤵
                        PID:4204
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3340,i,1250827366567694573,14946386807528221404,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5952 /prefetch:1
                        2⤵
                          PID:4116
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3472,i,12825759435207785011,1674771454957893971,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3464 /prefetch:1
                          2⤵
                            PID:2240
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5996,i,963390946048694547,15396646000614621585,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6024 /prefetch:8
                            2⤵
                              PID:4340
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6004,i,7451552788317396590,16551495439014583232,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5988 /prefetch:8
                              2⤵
                                PID:1468
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6008,i,2962453163186047341,1414269472641315028,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6056 /prefetch:8
                                2⤵
                                  PID:4892
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6116,i,12037246414700293264,12014986928194150947,262144 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5748 /prefetch:8
                                  2⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:4688
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3152,i,17484520337928911477,8960294673117611619,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5748 /prefetch:8
                                  2⤵
                                    PID:4224
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4536,i,297308652187602993,14519456478783061345,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4880 /prefetch:1
                                    2⤵
                                      PID:2360
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6260,i,7553922846519748215,12059009380321889217,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6024 /prefetch:8
                                      2⤵
                                        PID:4440
                                      • C:\Users\Admin\Downloads\Roblox Evon Exploit V4 UWP_56952442.exe
                                        "C:\Users\Admin\Downloads\Roblox Evon Exploit V4 UWP_56952442.exe"
                                        2⤵
                                        • Executes dropped EXE
                                        • Modifies registry class
                                        PID:1036
                                      • C:\Users\Admin\Downloads\Roblox Evon Exploit V4 UWP_56952442.exe
                                        "C:\Users\Admin\Downloads\Roblox Evon Exploit V4 UWP_56952442.exe"
                                        2⤵
                                        • Checks computer location settings
                                        • Executes dropped EXE
                                        • Modifies registry class
                                        • Suspicious use of WriteProcessMemory
                                        PID:1692
                                        • C:\Windows\system32\NOTEPAD.EXE
                                          "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt
                                          3⤵
                                          • Opens file in notepad (likely ransom note)
                                          PID:2140
                                      • C:\Users\Admin\Downloads\Roblox Evon Exploit V4 UWP_56952442.exe
                                        "C:\Users\Admin\Downloads\Roblox Evon Exploit V4 UWP_56952442.exe"
                                        2⤵
                                        • Downloads MZ/PE file
                                        • Executes dropped EXE
                                        • Drops file in Program Files directory
                                        • Modifies registry class
                                        • Suspicious use of WriteProcessMemory
                                        PID:1800
                                        • C:\Users\Admin\AppData\Local\OperaGX_56952442.exe
                                          C:\Users\Admin\AppData\Local\OperaGX_56952442.exe --silent --allusers=0
                                          3⤵
                                          • Executes dropped EXE
                                          • System Location Discovery: System Language Discovery
                                          • Suspicious use of WriteProcessMemory
                                          PID:3712
                                          • C:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exe
                                            C:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exe --silent --allusers=0 --server-tracking-blob=MTc1ZjBiNWU4MTgxMTA0YWU2ZmM5ZjNiN2JmOGVjNWMwNjRkZjY4YWM3MDUwYjk2NmU0ZGUxNWZlMDBhMDJkNzp7ImNvdW50cnkiOiJHQiIsImVkaXRpb24iOiJzdGQtMiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOiJvcGVyYV9neCIsInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yP3V0bV9zb3VyY2U9UFdOZ2FtZXMmdXRtX21lZGl1bT1wYSZ1dG1fY2FtcGFpZ249UFdOX0dCX1BCNV85NDE2XzM1NzUmdXRtX2lkPWQ4NjNhODI5NjhlODRlMTk4OWQ5YjBhNzg4OWVkZDBhIiwidGltZXN0YW1wIjoiMTc4NTU2OTc4NC42MjIxIiwidXNlcmFnZW50IjoiTW96aWxsYS80LjAgKGNvbXBhdGlibGU7IE1TSUUgNy4wOyBXaW5kb3dzIE5UIDYuMjsgV2luNjQ7IHg2NDsgVHJpZGVudC83LjA7IC5ORVQ0LjBDOyAuTkVUNC4wRTsgLk5FVCBDTFIgMi4wLjUwNzI3OyAuTkVUIENMUiAzLjAuMzA3Mjk7IC5ORVQgQ0xSIDMuNS4zMDcyOSkiLCJ1dG0iOnsiY2FtcGFpZ24iOiJQV05fR0JfUEI1Xzk0MTZfMzU3NSIsImlkIjoiZDg2M2E4Mjk2OGU4NGUxOTg5ZDliMGE3ODg5ZWRkMGEiLCJtZWRpdW0iOiJwYSIsInNvdXJjZSI6IlBXTmdhbWVzIn0sInV1aWQiOiI1ZmE3Yjg4NC0wOTk5LTQwNTYtYWY0NC0yZTQzNTA1YmJmZTMifQ==
                                            4⤵
                                            • Downloads MZ/PE file
                                            • Executes dropped EXE
                                            • Enumerates connected drives
                                            • Enumerates system info in registry
                                            • Modifies system certificate store
                                            • Suspicious use of WriteProcessMemory
                                            PID:3564
                                            • C:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exe
                                              C:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.109 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ff7ba10cd88,0x7ff7ba10cd94,0x7ff7ba10cda0
                                              5⤵
                                              • Executes dropped EXE
                                              PID:2068
                                            • C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\installer.exe
                                              "C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\installer.exe" --version
                                              5⤵
                                              • Executes dropped EXE
                                              PID:444
                                            • C:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exe
                                              "C:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=3564 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_20260801083629" --session-guid=42e14699-a278-420d-a60e-3616bb536688 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=6808000000000000
                                              5⤵
                                              • Executes dropped EXE
                                              • Enumerates connected drives
                                              • Suspicious use of WriteProcessMemory
                                              PID:4244
                                              • C:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exe
                                                C:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.109 --initial-client-data=0x28c,0x290,0x294,0x25c,0x298,0x7ff7ba10cd88,0x7ff7ba10cd94,0x7ff7ba10cda0
                                                6⤵
                                                • Executes dropped EXE
                                                PID:2080
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe" --backend --initial-pid=3564 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291" --session-guid=42e14699-a278-420d-a60e-3616bb536688 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=133.0.5932.81
                                                6⤵
                                                • Executes dropped EXE
                                                • Enumerates connected drives
                                                • Modifies registry class
                                                • Suspicious use of SetWindowsHookEx
                                                • Suspicious use of WriteProcessMemory
                                                PID:1724
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ff78490cd88,0x7ff78490cd94,0x7ff78490cda0
                                                  7⤵
                                                  • Executes dropped EXE
                                                  PID:1728
                                                • C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                                                  7⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Adds Run key to start application
                                                  • System Location Discovery: System Language Discovery
                                                  • Modifies Internet Explorer settings
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:4976
                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe
                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x674b80,0x674b8c,0x674b98
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • System Location Discovery: System Language Discovery
                                                    PID:988
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • System Location Discovery: System Language Discovery
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:3364
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7b4b80,0x7b4b8c,0x7b4b98
                                                      9⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • System Location Discovery: System Language Discovery
                                                      PID:3620
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                                                      9⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • System Location Discovery: System Language Discovery
                                                      • Enumerates system info in registry
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:3936
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                        10⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        PID:2900
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x19c,0x1a0,0x198,0x168,0x194,0x7fff99301560,0x7fff99301570,0x7fff99301580
                                                          11⤵
                                                          • Executes dropped EXE
                                                          PID:5040
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                        10⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • Enumerates system info in registry
                                                        PID:1784
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x1a0,0x1a4,0x1a8,0x19c,0x1ac,0x7fff99301560,0x7fff99301570,0x7fff99301580
                                                          11⤵
                                                          • Executes dropped EXE
                                                          PID:3376
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x27c,0x280,0x284,0x250,0x288,0xef8378,0xef8384,0xef8390
                                                        10⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • System Location Discovery: System Language Discovery
                                                        PID:2836
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                          11⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Enumerates system info in registry
                                                          PID:1940
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x190,0x194,0x18c,0x15c,0x188,0x7fff99301560,0x7fff99301570,0x7fff99301580
                                                            12⤵
                                                            • Executes dropped EXE
                                                            PID:4408
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                          11⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Enumerates system info in registry
                                                          PID:1116
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x190,0x194,0x18c,0x15c,0x188,0x7fff99301560,0x7fff99301570,0x7fff99301580
                                                            12⤵
                                                            • Executes dropped EXE
                                                            PID:3576
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                                          11⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          PID:2100
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x1a0,0x1a4,0x1a8,0x19c,0x1ac,0x7fff99301560,0x7fff99301570,0x7fff99301580
                                                            12⤵
                                                            • Executes dropped EXE
                                                            PID:4308
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                                                  7⤵
                                                  • Checks computer location settings
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Adds Run key to start application
                                                  • Drops file in Program Files directory
                                                  • Checks processor information in registry
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                  PID:1644
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x190,0x194,0x18c,0x15c,0x188,0x7fff99301560,0x7fff99301570,0x7fff99301580
                                                    8⤵
                                                    • Executes dropped EXE
                                                    PID:444
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1736,i,4157527421484660875,10919885383356383685,262144 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1900 /prefetch:2
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    PID:5288
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2140,i,16432745660728476409,2487785354720621966,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2160 /prefetch:3
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • System Time Discovery
                                                    • Enumerates system info in registry
                                                    PID:5340
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2424,i,11482756443952964886,15995923778911922035,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2436 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    PID:5376
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2764,i,15420974648604193294,9130140899397732322,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3096 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • Enumerates system info in registry
                                                    PID:5676
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3460,i,17712853838081074235,14703190253410385995,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3400 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    PID:5684
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3448,i,4490354529539855370,1062242163397356559,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3020 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    PID:5692
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3472,i,12086169446666767745,6145016312692498570,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3408 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    PID:5712
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3484,i,8588835510484847606,6140370587122789416,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3360 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    PID:5720
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3496,i,1897676684168093454,18026927596758443747,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3420 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • Enumerates system info in registry
                                                    PID:5728
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4116,i,596629196962462098,222803617071616605,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4124 /prefetch:1
                                                    8⤵
                                                    • Checks computer location settings
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    PID:5836
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_gx_splash.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                                                    8⤵
                                                    • Executes dropped EXE
                                                    PID:3264
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4644,i,8949025623255151812,94622201927771804,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4664 /prefetch:1
                                                    8⤵
                                                    • Checks computer location settings
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    PID:960
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4812,i,3209231170954714291,17913320084723364728,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4856 /prefetch:2
                                                    8⤵
                                                    • Checks computer location settings
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    PID:4504
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4984,i,18437665506136794678,9014782741562864974,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5000 /prefetch:1
                                                    8⤵
                                                    • Checks computer location settings
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • Enumerates system info in registry
                                                    PID:5744
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5028,i,12608337537706815413,12918923408580599517,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5136 /prefetch:1
                                                    8⤵
                                                    • Checks computer location settings
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    PID:5700
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5260,i,794803974241218264,7447649912568672365,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5268 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    PID:5804
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5276,i,7161315617795601327,17623222689826541591,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5168 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    PID:6260
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5272,i,2685813743553918822,9684420641665358438,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5356 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    PID:6268
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5264,i,1089321375299178823,16745143589964910095,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5508 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Enumerates system info in registry
                                                    PID:6312
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5808,i,2752206299284729212,3147448612944955994,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5940 /prefetch:2
                                                    8⤵
                                                    • Checks computer location settings
                                                    • Executes dropped EXE
                                                    PID:6692
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6436,i,2544874322550233121,2377408817218704917,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6440 /prefetch:2
                                                    8⤵
                                                    • Checks computer location settings
                                                    • Executes dropped EXE
                                                    PID:6736
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6328,i,10865502437332078261,14857938380951499564,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6720 /prefetch:1
                                                    8⤵
                                                    • Checks computer location settings
                                                    • Enumerates system info in registry
                                                    PID:6920
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6464,i,5960574219558849147,1893758507248423557,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6460 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Enumerates system info in registry
                                                    PID:6228
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=7048,i,8410550545939841724,6803060056847443005,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7096 /prefetch:2
                                                    8⤵
                                                    • Checks computer location settings
                                                    • Enumerates system info in registry
                                                    PID:6160
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7044,i,3238974028220081593,4258579568873664231,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7236 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    PID:6216
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7244,i,9508060684187426345,12149691031448016363,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7360 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    PID:6708
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7336,i,11305142509378405442,4620533174668280159,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7240 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    PID:6744
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7428,i,10510815510018085730,10442940704269733592,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7440 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Enumerates system info in registry
                                                    PID:6848
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7444,i,2798557522490294101,10550285590881364706,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7836 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    • Enumerates system info in registry
                                                    PID:6512
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7848,i,5719762745527725443,9700276257151073153,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7460 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    PID:6524
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8096,i,5770004330158851160,17306637594894605660,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8112 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    PID:6560
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8152,i,13080255519399507885,4040164856147716768,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8124 /prefetch:8
                                                    8⤵
                                                    • Executes dropped EXE
                                                    PID:6572
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8288,i,17503847731917268157,4861939474838068800,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8484 /prefetch:8
                                                    8⤵
                                                      PID:6520
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8440,i,14408434194450243392,16735305012582472620,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8504 /prefetch:8
                                                      8⤵
                                                      • Enumerates system info in registry
                                                      PID:7008
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8472,i,9939954496185298897,13920110543752749629,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8524 /prefetch:8
                                                      8⤵
                                                      • Enumerates system info in registry
                                                      PID:7036
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=8924,i,13017291051017220810,5458286199737595190,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8988 /prefetch:2
                                                      8⤵
                                                      • Checks computer location settings
                                                      • Enumerates system info in registry
                                                      PID:6352
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8952,i,15703630115444216266,9516566182873375387,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9132 /prefetch:8
                                                      8⤵
                                                      • Enumerates system info in registry
                                                      PID:5916
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9156,i,15121034834865129969,18155223901733477243,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9008 /prefetch:8
                                                      8⤵
                                                        PID:6184
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9332,i,13026355287022699264,218312174308976960,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9344 /prefetch:8
                                                        8⤵
                                                        • Enumerates system info in registry
                                                        PID:6704
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B54
                                                        8⤵
                                                          PID:4108
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff6d5a99860,0x7ff6d5a9986c,0x7ff6d5a99878
                                                            9⤵
                                                              PID:6204
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5844,i,13541279125963496503,5668200326429331841,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9396 /prefetch:8
                                                            8⤵
                                                            • Enumerates system info in registry
                                                            PID:6564
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5516,i,14817018292189373573,9830105778551525946,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=3324 /prefetch:8
                                                            8⤵
                                                            • Enumerates system info in registry
                                                            PID:6360
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=9652,i,2807207885093642222,13730962034239539243,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=9696 /prefetch:1
                                                            8⤵
                                                            • Checks computer location settings
                                                            PID:5936
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8248,i,9115691933942277549,17678751135226921571,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=8220 /prefetch:8
                                                            8⤵
                                                            • Enumerates system info in registry
                                                            PID:6452
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8168,i,6391393380289212211,8745791391699808352,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=9196 /prefetch:8
                                                            8⤵
                                                              PID:7056
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe" --fix-taskbar-pins
                                                              8⤵
                                                              • Enumerates system info in registry
                                                              PID:5948
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff78490cd88,0x7ff78490cd94,0x7ff78490cda0
                                                                9⤵
                                                                  PID:6364
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9532,i,14497915488291186420,10725812643893420453,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=8200 /prefetch:8
                                                                8⤵
                                                                  PID:1748
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=4228,i,4996472591572993828,11405731474376271216,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=5556 /prefetch:8
                                                                  8⤵
                                                                  • Enumerates system info in registry
                                                                  PID:2488
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5672,i,5225273015141709293,8024520863012242159,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=8244 /prefetch:8
                                                                  8⤵
                                                                  • Enumerates system info in registry
                                                                  PID:6404
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8416,i,17548204348785380296,11378725733690057393,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=8656 /prefetch:8
                                                                  8⤵
                                                                  • Enumerates system info in registry
                                                                  PID:6808
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8824,i,11962969924697063079,2285380293009361961,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=5860 /prefetch:8
                                                                  8⤵
                                                                    PID:5504
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=4188,i,18436116782560601000,4978020763745249825,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=9520 /prefetch:8
                                                                    8⤵
                                                                    • Enumerates system info in registry
                                                                    PID:5692
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8092,i,16365244490544691159,3302990145976129327,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=5464 /prefetch:8
                                                                    8⤵
                                                                      PID:3324
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8976,i,6160004665834927199,13333506027621799778,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9572 /prefetch:8
                                                                      8⤵
                                                                        PID:6668
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9136,i,3027900791081656380,13138801821672227855,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8248 /prefetch:8
                                                                        8⤵
                                                                          PID:2160
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6380,i,1534492791712965468,477236163637939119,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=8596 /prefetch:8
                                                                          8⤵
                                                                            PID:6560
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8784,i,10720406726684137111,13138110121722635951,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=8560 /prefetch:8
                                                                            8⤵
                                                                            • Enumerates system info in registry
                                                                            PID:5684
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8932,i,477869649247930129,7760021266165792364,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=4168 /prefetch:8
                                                                            8⤵
                                                                            • Enumerates system info in registry
                                                                            PID:6564
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=8360,i,13917482724321009081,7861650784341804301,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=5268 /prefetch:2
                                                                            8⤵
                                                                            • Checks computer location settings
                                                                            • Enumerates system info in registry
                                                                            PID:6352
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7996,i,8818676331811127810,412331062942606939,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8060 /prefetch:8
                                                                            8⤵
                                                                            • Enumerates system info in registry
                                                                            PID:3912
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=3444,i,9953400757634717808,11118435872079095706,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=9152 /prefetch:2
                                                                            8⤵
                                                                            • Checks computer location settings
                                                                            PID:4220
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=8700,i,10560405535517053483,1050057991329685374,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=8300 /prefetch:2
                                                                            8⤵
                                                                            • Checks computer location settings
                                                                            • Enumerates system info in registry
                                                                            PID:5876
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=9472,i,7359388182252090140,2800929960181102585,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=9400 /prefetch:2
                                                                            8⤵
                                                                            • Checks computer location settings
                                                                            PID:5320
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8864,i,11251999898108076715,17637388467118514766,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=7588 /prefetch:8
                                                                            8⤵
                                                                            • Enumerates system info in registry
                                                                            PID:5356
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=8972,i,2282221198870119286,11758802000067094718,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=4168 /prefetch:2
                                                                            8⤵
                                                                            • Checks computer location settings
                                                                            • Enumerates system info in registry
                                                                            PID:7244
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=9180,i,2429444329586328540,11345335801317588228,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=8972 /prefetch:2
                                                                            8⤵
                                                                            • Checks computer location settings
                                                                            • Enumerates system info in registry
                                                                            PID:5792
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8560,i,9418056549719318696,10992464141290013560,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=8656 /prefetch:8
                                                                            8⤵
                                                                              PID:5688
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8972,i,3654596191118696247,9785707122709124004,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=8784 /prefetch:8
                                                                              8⤵
                                                                                PID:6484
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4176,i,4927784295169105643,7796395376015402595,262144 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=5556 /prefetch:8
                                                                                8⤵
                                                                                • Enumerates system info in registry
                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                PID:6628
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=9312,i,12489773343806644581,7989538652270962915,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=8064 /prefetch:2
                                                                                8⤵
                                                                                • Checks computer location settings
                                                                                PID:6196
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7396,i,8743137738906049254,15830379836486821743,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=8548 /prefetch:8
                                                                                8⤵
                                                                                • Enumerates system info in registry
                                                                                PID:7636
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8064,i,10873551872379780128,8342728111520870675,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=7024 /prefetch:8
                                                                                8⤵
                                                                                • Enumerates system info in registry
                                                                                PID:7784
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=8756,i,1434188156806123620,8513878842607797708,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=9540 /prefetch:2
                                                                                8⤵
                                                                                • Checks computer location settings
                                                                                • Enumerates system info in registry
                                                                                PID:1460
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8352,i,10026797685643558213,5121758644785466008,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=4172 /prefetch:8
                                                                                8⤵
                                                                                • Enumerates system info in registry
                                                                                PID:8008
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9524,i,6954655910468847430,688048458463529374,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=7024 /prefetch:8
                                                                                8⤵
                                                                                • Enumerates system info in registry
                                                                                PID:3828
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=8308,i,17051852497194916657,9745816717380240675,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=9084 /prefetch:2
                                                                                8⤵
                                                                                • Checks computer location settings
                                                                                • Enumerates system info in registry
                                                                                PID:6272
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3448,i,17338031132562040431,3675160820566842836,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=8068 /prefetch:8
                                                                                8⤵
                                                                                • Enumerates system info in registry
                                                                                PID:5320
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=8484,i,11104458918873721311,1063247146819105815,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=4204 /prefetch:2
                                                                                8⤵
                                                                                • Checks computer location settings
                                                                                • Enumerates system info in registry
                                                                                PID:8048
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9580,i,13891123918948036317,4103448021613759043,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=8360 /prefetch:8
                                                                                8⤵
                                                                                • Enumerates system info in registry
                                                                                PID:4568
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9072,i,6651806812663353046,7102213454668056530,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=1572 /prefetch:8
                                                                                8⤵
                                                                                • Enumerates system info in registry
                                                                                PID:1184
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=8760,i,17465031113887850149,6267395383645603825,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=8628 /prefetch:2
                                                                                8⤵
                                                                                • Checks computer location settings
                                                                                • Enumerates system info in registry
                                                                                PID:2312
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=4172,i,13147608738088409560,14786429888300924128,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=8324 /prefetch:2
                                                                                8⤵
                                                                                • Checks computer location settings
                                                                                • Enumerates system info in registry
                                                                                PID:6004
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=8308,i,2913689914111191714,7910193788598900667,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709064086344961 --mojo-platform-channel-handle=1572 /prefetch:2
                                                                                8⤵
                                                                                • Checks computer location settings
                                                                                • Enumerates system info in registry
                                                                                PID:5844
                                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
                                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"
                                                                          5⤵
                                                                          • Executes dropped EXE
                                                                          • System Location Discovery: System Language Discovery
                                                                          PID:4720
                                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe
                                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe" --version
                                                                          5⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • System Location Discovery: System Language Discovery
                                                                          • Suspicious use of WriteProcessMemory
                                                                          PID:1236
                                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe
                                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x674b80,0x674b8c,0x674b98
                                                                            6⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • System Location Discovery: System Language Discovery
                                                                            PID:1344
                                                                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                  1⤵
                                                                    PID:3680
                                                                  • C:\Windows\system32\svchost.exe
                                                                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                    1⤵
                                                                      PID:3308
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                      1⤵
                                                                      • Checks processor information in registry
                                                                      • Enumerates system info in registry
                                                                      • Modifies data under HKEY_USERS
                                                                      • Modifies registry class
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                      • Suspicious use of FindShellTrayWindow
                                                                      • Suspicious use of SendNotifyMessage
                                                                      • Suspicious use of WriteProcessMemory
                                                                      PID:2684
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xf8,0x108,0x7fffccd6c728,0x7fffccd6c734,0x7fffccd6c740
                                                                        2⤵
                                                                          PID:4424
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,10723047592315439029,10755476488787612355,262144 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=1888 /prefetch:2
                                                                          2⤵
                                                                            PID:4560
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2236,i,2195881517344544887,10703703769552185035,524288 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=2276 /prefetch:3
                                                                            2⤵
                                                                            • System Time Discovery
                                                                            PID:1764
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,2571668355670065431,5269083577309146409,524288 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=2556 /prefetch:8
                                                                            2⤵
                                                                              PID:3032
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,2227798152996853841,9689458630676585378,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=3244 /prefetch:1
                                                                              2⤵
                                                                                PID:4344
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3248,i,4847476790420525510,11435711410776658651,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=3288 /prefetch:1
                                                                                2⤵
                                                                                  PID:1676
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4460,i,17389425761220464202,8924258461408707706,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=4564 /prefetch:1
                                                                                  2⤵
                                                                                    PID:968
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5304,i,3428537261589144226,16392276751257882008,524288 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5300 /prefetch:8
                                                                                    2⤵
                                                                                      PID:2324
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5304,i,17209251003795724453,14203484736749763684,524288 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5800 /prefetch:8
                                                                                      2⤵
                                                                                        PID:6868
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5596,i,14813634768846095638,8883893345760006485,524288 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5148 /prefetch:8
                                                                                        2⤵
                                                                                          PID:6080
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5720,i,12101168437423231788,17023823245202815179,524288 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5320 /prefetch:8
                                                                                          2⤵
                                                                                            PID:5920
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5820,i,6636458264340105002,4021670560833718924,262144 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5528 /prefetch:8
                                                                                            2⤵
                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                            PID:396
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5872,i,3041612806828585085,11042276729981081512,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5888 /prefetch:1
                                                                                            2⤵
                                                                                              PID:4600
                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3952,i,11331230628418347328,1122800433512813084,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5868 /prefetch:1
                                                                                              2⤵
                                                                                                PID:8036
                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5568,i,6547317794256182411,2455081411016393236,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=4568 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:6688
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5792,i,14370044517303348430,9852051775923181631,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5868 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:7104
                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4564,i,9953595848611222961,6622868268960968629,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=3328 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:5096
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4236,i,13378531876468394137,8859640403753029766,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5964 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:8140
                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=840,i,401781636576072677,17754520618241037460,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=4556 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:3732
                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5916,i,1754299279199448958,8074024991215766643,524288 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5928 /prefetch:8
                                                                                                          2⤵
                                                                                                            PID:7180
                                                                                                        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                          1⤵
                                                                                                            PID:4988
                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                            1⤵
                                                                                                              PID:176
                                                                                                            • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                              C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                              1⤵
                                                                                                                PID:5472
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                                                                                1⤵
                                                                                                                • Executes dropped EXE
                                                                                                                • Loads dropped DLL
                                                                                                                PID:5928
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x174,0x178,0x170,0x140,0x16c,0x7fff99301560,0x7fff99301570,0x7fff99301580
                                                                                                                  2⤵
                                                                                                                  • Executes dropped EXE
                                                                                                                  PID:5976
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F
                                                                                                                1⤵
                                                                                                                • Enumerates system info in registry
                                                                                                                PID:7124
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff6d5a99860,0x7ff6d5a9986c,0x7ff6d5a99878
                                                                                                                  2⤵
                                                                                                                    PID:6132
                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version
                                                                                                                    2⤵
                                                                                                                      PID:7752
                                                                                                                  • C:\Windows\System32\rundll32.exe
                                                                                                                    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                    1⤵
                                                                                                                      PID:7976
                                                                                                                    • C:\Windows\system32\NOTEPAD.EXE
                                                                                                                      "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Evon\READ ME.txt
                                                                                                                      1⤵
                                                                                                                        PID:1680

                                                                                                                      Network

                                                                                                                            MITRE ATT&CK Enterprise v16

                                                                                                                            Replay Monitor

                                                                                                                            Loading Replay Monitor...

                                                                                                                            Downloads

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_115618428\manifest.json
                                                                                                                            • Size 95B
                                                                                                                            • SHA256 d8ae70809509129324716f92f9916dfe66ef25f2bfb5297e29d94e431b52c950
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_1499898782\manifest.json
                                                                                                                            • Size 202B
                                                                                                                            • SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_1718889848\manifest.json
                                                                                                                            • Size 72B
                                                                                                                            • SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_1875924885\manifest.json
                                                                                                                            • Size 145B
                                                                                                                            • SHA256 6cce5ad8d496bc5179fa84af8afc568eeba980d8a75058c6380b64fb42298c28
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            hyph-as.hyb

                                                                                                                            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-as.hyb
                                                                                                                            • Size 703B
                                                                                                                            • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            hyph-hi.hyb

                                                                                                                            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-hi.hyb
                                                                                                                            • Size 687B
                                                                                                                            • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            hyph-nb.hyb

                                                                                                                            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-nb.hyb
                                                                                                                            • Size 141KB
                                                                                                                            • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\manifest.json
                                                                                                                            • Size 82B
                                                                                                                            • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_545816696\manifest.json
                                                                                                                            • Size 1002B
                                                                                                                            • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_550114054\manifest.json
                                                                                                                            • Size 94B
                                                                                                                            • SHA256 95a2b0748baee70740ff2d5da78f98b5a29950562f989591f0b0b5bf13354b85
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_846731524\manifest.json
                                                                                                                            • Size 73B
                                                                                                                            • SHA256 aa1e29e7d64a11b734627921662f9ea9ddc745f1a97270e2e54e12c26267fa53
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 51c2555ad45433b5a8aeb58f7ba9971e9aee0fc7e1c464c74203f0cd904ecacb
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            8B2B9A00839EED1DFDCCC3BFC2F5DF12

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 63b14543360f5e89942ea8d5113526e64fbc71c1207328f0136b3a495d921dd0
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            AC4E2962244A136DBC0532A10184FEF3

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AC4E2962244A136DBC0532A10184FEF3
                                                                                                                            • Size 362KB
                                                                                                                            • SHA256 7cf37cbb849463f36c5ade34720d0c67b2f90ecfbd29a6b135770dee59fdd4d5
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            B46811C17859FFB409CF0E904A4AA8F8

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
                                                                                                                            • Size 528B
                                                                                                                            • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            C1FCA6D61D8F4CEC04EBECE6E4B83B12_5864C5D103AA2977DAA3610A2E65E58A

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C1FCA6D61D8F4CEC04EBECE6E4B83B12_5864C5D103AA2977DAA3610A2E65E58A
                                                                                                                            • Size 472B
                                                                                                                            • SHA256 2f3b6ceb4b2ec1dcf984ba7ff1d8db19aff25059c4514919d722932cc148a83a
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                            • Size 471B
                                                                                                                            • SHA256 0d2833c0297374f4dab44798d2a22189c5c84550445adc9d85aa0d65f2f6f7bb
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            E5FF48EF4A295D151D3BF7A25DB4555B

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E5FF48EF4A295D151D3BF7A25DB4555B
                                                                                                                            • Size 456B
                                                                                                                            • SHA256 6123ec3d6c46626f68c01fe531a58fab79045bcddf4912a1487101162e13c5dd
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
                                                                                                                            • Size 410B
                                                                                                                            • SHA256 a004c7c2167f48da03e992c8b76a2a6a34dc9588800a0e98e455b8d0b7e14380
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            8B2B9A00839EED1DFDCCC3BFC2F5DF12

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                                                            • Size 174B
                                                                                                                            • SHA256 a58a5bec95ccfc8037d8b7b0b0f10436abeb0971bc2fa2f3612c0c57922ab3e6
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            AC4E2962244A136DBC0532A10184FEF3

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AC4E2962244A136DBC0532A10184FEF3
                                                                                                                            • Size 192B
                                                                                                                            • SHA256 446941132cc3dc2ebad3f2004d29ecc2f854c6114e1243f1275082b2c80f0d61
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            B46811C17859FFB409CF0E904A4AA8F8

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
                                                                                                                            • Size 170B
                                                                                                                            • SHA256 daa20e38fa8aa8f438d7a0979a0bf0f0bc1d08c806b2efeafb2fd2f594221204
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            C1FCA6D61D8F4CEC04EBECE6E4B83B12_5864C5D103AA2977DAA3610A2E65E58A

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C1FCA6D61D8F4CEC04EBECE6E4B83B12_5864C5D103AA2977DAA3610A2E65E58A
                                                                                                                            • Size 418B
                                                                                                                            • SHA256 0f89e9ad591411911237ae5c020f580b8b0cd04e3a0d12be9fbfa610fcf1a666
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                            • Size 416B
                                                                                                                            • SHA256 0c6a905c57e92819b03bd1deed7d00e713ac3e5f51e8c78733771519ccaedabb
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            E5FF48EF4A295D151D3BF7A25DB4555B

                                                                                                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E5FF48EF4A295D151D3BF7A25DB4555B
                                                                                                                            • Size 192B
                                                                                                                            • SHA256 4cf0e4afadfc50f0b410b18ecbce82f09f0803985218ed7ebaf9f6f99639197b
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            CrashpadMetrics-active.pma

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
                                                                                                                            • Size 1024KB
                                                                                                                            • SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            settings.dat

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                                                            • Size 40B
                                                                                                                            • SHA256 77bcdb2c3160a7fd4141144587938963255d18e2280ca048bae35e2b889daae1
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            BookmarkMergedSurfaceOrdering

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                            • Size 6B
                                                                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            BrowsingTopicsState

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                            • Size 414B
                                                                                                                            • SHA256 05b79df49756700fe065dcf2116cb8844e3448fda004d72b942b84b202ef4a03
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                            • Size 768B
                                                                                                                            • SHA256 8eaf313d97e5abdb4f56cacfd583c90e809866a5516ec542d65c07e9f188e6f6
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                            • Size 624B
                                                                                                                            • SHA256 14e762d3dcd8194d4c077a593cf06ac2732682d4baae5c1c48742c9595788344
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            data_1

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
                                                                                                                            • Size 264KB
                                                                                                                            • SHA256 fb6b5073001b19010236c36d89043a41f784c7a4a27d9c4595afceab1819dbb7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            9fad27b5-8c9d-42ce-9cbd-8e7a6804082c.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\9fad27b5-8c9d-42ce-9cbd-8e7a6804082c.tmp
                                                                                                                            • Size 2B
                                                                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            Network Persistent State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                            • Size 6KB
                                                                                                                            • SHA256 259387a5baa76a28b43e2511a8ec65cfc1078a1a25da9a3a4f3b182f58910820
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Network Persistent State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 dd64348d1f660a23e8469ada3c7cc91416939ba989435c8b5acd97f0cbcfe744
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Network Persistent State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 66fe757fb7a2943eb2f8200c30142cf13d2a7d8c9e308af37cd23a1703d36638
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Network Persistent State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 4a72c9b21a316371892c86ccec7d90986d43c5022c871e18af293718b5291745
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Network Persistent State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                            • Size 7KB
                                                                                                                            • SHA256 b2c6f1608cde27301c80e2d9b18c1963c6ff611efea9b512a04ab72cf19e38a1
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Network Persistent State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                            • Size 7KB
                                                                                                                            • SHA256 37e4df5a370fef1163e4c87bc1de97140659427b09e965698495b9f8ee362670
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            TransportSecurity

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                            • Size 858B
                                                                                                                            • SHA256 a20521726a4f2e3f25687f58d5e0189fa958ba1e7e1d9362c18d91c77c0346d9
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 13KB
                                                                                                                            • SHA256 2b046ed9b9edeca347524530b1b9a70961ac0837730a19ffcf5bed1d56c926d4
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 12KB
                                                                                                                            • SHA256 9bee321221173ca802a41254159ae4db400c92aceaaaa1db37dde92322d71c41
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 13KB
                                                                                                                            • SHA256 ade0996818a2ed887c4f437f836b2de3ccd80194e8e2b423eef376782acfe3f3
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 14KB
                                                                                                                            • SHA256 e5d98f6ca5ae40cf12e43c78ea30c894204ff28a3cd8b7397b4ed65457773a15
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 a58e0508e3a371405d2b2e4922f435252450c11357167e88c98acda549580105
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 13KB
                                                                                                                            • SHA256 70b5a23f08716ea23cbab14fe635f9f76ac34449ead0d100243691796a3bf027
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 9e151191ba0c8ad8e58d2b76b2d1fbbe19db46630e9fc3405077216579569473
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 8e40a355943da315eb94ef19bbe911a254a3bdb057257c4916af9dc2c6b558a3
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 25e98ae10033fb82f27af272f302e737036df66f5bdffcd15ccfbfe3a36fde8b
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 bef3db6308c7ccad5948bda280721e87dc98d8823481337cbab47f49bbc2901b
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 cd6782895c8a98f1400b32b0a073575255b4520e86b7cf38bd59bb8f0f0219eb
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 dab2bf176a05409b31e84dac26d9ac27bb1e53d3f51a60569a011f36b221ed80
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 ddbcc0697686bdc34f48a37bf6094cd12f8acb8c09b8ba8187a458ce9de4c3be
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 fe5d919834bb93e63a7c5915e7ae700df52f8677a20204c3a38e822d253ebcfe
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 bb7b7f06fc466d7c9166040786a4faf04e77dc533843cfea0c9a8f7812cadd13
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 022126171c7be7e53b75f50977ad3428f246350fe262c6db489f9febc8f6a7c2
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 a70ea4e7d47b215b1542634095bf1ca661d8478908775df4075233bf859389c2
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 b99ec3f8bbbe6ed65260da170f3923ebcf0c1b84b5c8575888bfb6d28d5aeab2
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 b265132240250a4d4923c2331689af0f25d8d434b2e94dc10e41d1eb82e719b7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 06b197249056e6c41d9230e8607c8b00e8140fb9829c2f28f832f5b32c63db9d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 0fe59642f54f2186b2cf746c9f908efef3bca3ebe3af781abe6d6292f607a406
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                            • Size 15KB
                                                                                                                            • SHA256 097921dfba4b2df39f854f3be4e7bd8d519b4b9e5b3a2e4a18fe27efb53c39d8
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Secure Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                            • Size 17KB
                                                                                                                            • SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                            • Size 120B
                                                                                                                            • SHA256 13dcde459b9fd90eadd2bf8d4dfce82985c2bd6e7acb402eed5b695cc6155617
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            the-real-index~RFe58ce38.TMP

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ce38.TMP
                                                                                                                            • Size 96B
                                                                                                                            • SHA256 c24b57405d8e293a72628595f56b25d5436b328cbe61934ec53ae2727b1ab2ed
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                            • Size 96B
                                                                                                                            • SHA256 f62df69d20dbdc417ec5366b1b77a6dc09567dc265186a8aa15b43ff3047cd3f
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            000003.log

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
                                                                                                                            • Size 247B
                                                                                                                            • SHA256 136f94cce007c7076221aee56e3717abe2a071f32472a787d137682a54e02e7b
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            LOG

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
                                                                                                                            • Size 348B
                                                                                                                            • SHA256 2d05151048aa628415f3bc374b2a7e554036bb979d9ff72c466ca9d94233a8b1
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            LOG

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
                                                                                                                            • Size 321B
                                                                                                                            • SHA256 c022abc7c5750832d0b0f32e69fca9177dad259d3b406735a16175556fb5fb35
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Last Version

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
                                                                                                                            • Size 13B
                                                                                                                            • SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                            • Size 236KB
                                                                                                                            • SHA256 60d071f7d9b80b1823652193f233740e2bc6e1cc4dd364049f65a821b2a24fc0
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                            • Size 237KB
                                                                                                                            • SHA256 d5d79ddda2ecbece60d9027697d5c65d5c0c01d58d2f4458b338c442d6e6f1ef
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                            • Size 115KB
                                                                                                                            • SHA256 737be0c3fa018738f42adf6c301ed4c03f2981c5fa8a613a26d322e61ed51e3d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                            • Size 237KB
                                                                                                                            • SHA256 aed70f2a95dd43dcec8f87ea87c560a3c5bdc7e6523c43820e8d31b2cb983b01
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                            • Size 237KB
                                                                                                                            • SHA256 c1afb6ee7a8127b70393fe82f2a946407bfc912887034b11883de964e9e7b7bd
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                            • Size 149KB
                                                                                                                            • SHA256 39a09ce8d981404bf35c1330e8f7264732a929a076e92e18d31b3b6582200b37
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                            • Size 236KB
                                                                                                                            • SHA256 127472ef662d88b483eae473b0e92ba58368ffde8b8a1c746b66b7056405c5cb
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                            • Size 262KB
                                                                                                                            • SHA256 59c6672c4fe67c16275bf935c107f2dd4600d9f202b41e041de4791dc703e628
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            data_1

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
                                                                                                                            • Size 264KB
                                                                                                                            • SHA256 518cb034d8b355dc1b0d905a8526b850e37eed61c0004abf03b8c27c89b9813e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Variations

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
                                                                                                                            • Size 86B
                                                                                                                            • SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 13B
                                                                                                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            ukm_db

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
                                                                                                                            • Size 48KB
                                                                                                                            • SHA256 8ebe4404bb0a9c35d2467823829d8811f57098a0a4fd0275a27b16410e573910
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            geo[1].htm

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\7FRQ0ITZ\geo[1].htm
                                                                                                                            • Size 18B
                                                                                                                            • SHA256 41fbf024b0285e7d81075c1bbb9bc4b8cde83c8e495aecca335d45fba74c9cd8
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            logo[2].png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8GAU4O3\logo[2].png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 c97e703578120c1f7a570acac3b461178a5e051ce16be9e266c1789c1d610ac0
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            OperaGX_56952442.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\OperaGX_56952442.exe
                                                                                                                            • Size 3.9MB
                                                                                                                            • SHA256 20e8b5abe10b4315e603a6e01a60972cf0794d6a39ee0d01a839cb0c637a5d09
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            custom_partner_content.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\resources\custom_partner_content.json
                                                                                                                            • Size 245KB
                                                                                                                            • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            assistant_installer.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                                                                                                                            • Size 2.5MB
                                                                                                                            • SHA256 e86907d20a18c6b99e270a4422e0c279079e8a118b6bd7fbb4001161ddc881f4
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            installer_prefs.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 e3ed5ad7cbfc11a1f2e8eef84201d3762861d14ddbfd323d295b57a9c8cbc369
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            opera.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                                                            • Size 2.9MB
                                                                                                                            • SHA256 ce68c0abdb0313bcece595866bb567ef6b8cfaab5b13c207cc3447af0a3343ec
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Opera GX Browser.lnk

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\Opera GX Browser.lnk
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 1cf41db858434c2d5acc9b70955d8b8ad9433b20d7685cef009d2d06bd79debd
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
                                                                                                                            • Size 2.8MB
                                                                                                                            • SHA256 0f50bda78a34e09ccfd5e33a7958de9eebe9863cc3d875e8b9c52dec3f3a9992
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            installer_prefs_include.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\installer_prefs_include.json
                                                                                                                            • Size 357B
                                                                                                                            • SHA256 b9af28cf2f5cba80e1700205e77623a99e677e4aaef9c7083d0b0fac122c3647
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            installer_prefs_include.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\installer_prefs_include.json
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 8c442787b5a4b819b0d5b1d25f64ec96515cf623e42c6118c6ff152842bf6ac7
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            installer_prefs_include.json.backup

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\installer_prefs_include.json.backup
                                                                                                                            • Size 342B
                                                                                                                            • SHA256 493614578a2f3e39745257d6e6563c033fe2b25450faab1f61b71a4e34074b3e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            installer.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exe
                                                                                                                            • Size 9.1MB
                                                                                                                            • SHA256 94e544bce1fb4f965564026d1f61eb1bf8e0f750305b1a2c82ea8a445ebb9f1a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            e3907b83-ae62-4359-b1f3-78bef474eac5.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1644_1119230085\e3907b83-ae62-4359-b1f3-78bef474eac5.tmp
                                                                                                                            • Size 472KB
                                                                                                                            • SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            8e40a42c-ff90-4d7f-9d9c-eec36953a771.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1644_1189560543\8e40a42c-ff90-4d7f-9d9c-eec36953a771.tmp
                                                                                                                            • Size 4.4MB
                                                                                                                            • SHA256 d364db16e995bf1205e67dfbc468d6f5ba57114821d2ce76fbcd8570744eaf7d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            favicon_opera_one.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1644_1189560543\CRX_INSTALL\favicon_opera_one.png
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            d3121a1a-d7b5-4ac7-8892-558beed562bd.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1644_1811220800\d3121a1a-d7b5-4ac7-8892-558beed562bd.tmp
                                                                                                                            • Size 13KB
                                                                                                                            • SHA256 35d78e805a910aad7462893e050376f9d18dbc73c592b4742e6ada87eff3f06b
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            fcb87d6e-a902-4dc8-a808-56fc2efc8f5d.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1644_1904354956\fcb87d6e-a902-4dc8-a808-56fc2efc8f5d.tmp
                                                                                                                            • Size 46KB
                                                                                                                            • SHA256 2acdd36bdc81d5cdd5962e02cb49a8714b42bf4ad8b49c4063eff022ba1a252d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            34c281ee-827e-4340-bf9e-49561070954b.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1644_434626541\34c281ee-827e-4340-bf9e-49561070954b.tmp
                                                                                                                            • Size 2.6MB
                                                                                                                            • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Icon_Light_Neutral.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1644_434626541\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            file.txt

                                                                                                                            • Path C:\Users\Admin\AppData\Local\file.txt
                                                                                                                            • Size 58B
                                                                                                                            • SHA256 574abac7779db72af4420e7e00a99d73ba84321b45fefbfc9ee1ebcc4a8cf4fc
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            23aec0a93f8e746a.customDestinations-ms

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23aec0a93f8e746a.customDestinations-ms
                                                                                                                            • Size 23KB
                                                                                                                            • SHA256 302b89d261486b856027c9d85b4c40b5a12e7e275611c82622c653542d5425ac
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            23aec0a93f8e746a.customDestinations-ms

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23aec0a93f8e746a.customDestinations-ms
                                                                                                                            • Size 23KB
                                                                                                                            • SHA256 f763ff3b24290af020597d1c192c5efb1c886c3d9a8fcd98e35642c8bbbc9fa4
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            23aec0a93f8e746a.customDestinations-ms

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23aec0a93f8e746a.customDestinations-ms
                                                                                                                            • Size 23KB
                                                                                                                            • SHA256 47d5f604aa44d1487744ffd043e42a215ce3855a14197a395300e72b48b1d5c6
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            23aec0a93f8e746a.customDestinations-ms

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23aec0a93f8e746a.customDestinations-ms
                                                                                                                            • Size 23KB
                                                                                                                            • SHA256 34c6d84683f1f488c17c6dc2a1a375f270fe5f743f5d5be3a29344b9e01bcef8
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            23aec0a93f8e746a.customDestinations-ms

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23aec0a93f8e746a.customDestinations-ms
                                                                                                                            • Size 23KB
                                                                                                                            • SHA256 a6a47545d5ac7c73105559e2683797bafcbd76c08f75681a2c8b909bb670ba82
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            heuristic_regexes.binarypb

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\AmountExtractionHeuristicRegexes\4\heuristic_regexes.binarypb
                                                                                                                            • Size 633B
                                                                                                                            • SHA256 a10f65d7e0d56702d6f08850c8bee9bd51af17f4be051900ff2b88c9217e425f
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            crl-set

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\CertificateRevocation\10687\crl-set
                                                                                                                            • Size 1.5MB
                                                                                                                            • SHA256 77ff7f425e4fe157fbad71cea49774a1fdf219b99011be3ba3428499c834f23c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            settings.dat

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                                                            • Size 40B
                                                                                                                            • SHA256 69282cf3ee1330375671aedcc02d2c1096c8e33ba0b9de105752b9c0af86877c
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            1b92b8c2-3c78-4c8e-af26-ad68fa2894a0.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\1b92b8c2-3c78-4c8e-af26-ad68fa2894a0.tmp
                                                                                                                            • Size 825KB
                                                                                                                            • SHA256 6c70d970232748f4c2862c8e5699297f7ef427ead9580504718213d4740d9954
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            52a11a44-f9b0-412f-bf1b-32bb875a3f62.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\52a11a44-f9b0-412f-bf1b-32bb875a3f62.tmp
                                                                                                                            • Size 162KB
                                                                                                                            • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            58302b92-c0b2-43ad-adef-586a929032cf.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\58302b92-c0b2-43ad-adef-586a929032cf.tmp
                                                                                                                            • Size 23KB
                                                                                                                            • SHA256 725e74854feffe4eb8672982a1d83fde74bf56593044cbb6ce1588f9f0237f04
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            70667ccd-f0e5-47c8-a4dd-d8b65ff925d4.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\70667ccd-f0e5-47c8-a4dd-d8b65ff925d4.tmp
                                                                                                                            • Size 327B
                                                                                                                            • SHA256 7c395f2e54e81baa757e70cc6dc90dab6dbaaac1b33992e000cbd9ecadefd9ff
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Bookmarks

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks
                                                                                                                            • Size 24KB
                                                                                                                            • SHA256 8a2b8842cfd484b323781fbefe46175a9eae80261c4bc627347d4e69dec75314
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            84317197-b43f-4ab2-874c-de3718dffb3f.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\84317197-b43f-4ab2-874c-de3718dffb3f.tmp
                                                                                                                            • Size 48B
                                                                                                                            • SHA256 da49332be961b328e3da2d3a6ae0e60149eca75c3e6f41d20a51aa201b971052
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 4b6546750176d9525c2280f84a853e2dfb36d34bf46c9e6ecab4211b172adad1
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            messages.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            background.js

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
                                                                                                                            • Size 17KB
                                                                                                                            • SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            twitch16.png

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
                                                                                                                            • Size 370B
                                                                                                                            • SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            twitch48.png

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
                                                                                                                            • Size 921B
                                                                                                                            • SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            main.js

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_0\main.js
                                                                                                                            • Size 46KB
                                                                                                                            • SHA256 e1b3123f37dfe988a8a22427e98d06cdf472c23429f6277f68c6eeb1626cd54e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            logo_128.png

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_128.png
                                                                                                                            • Size 7KB
                                                                                                                            • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            logo_16.png

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_16.png
                                                                                                                            • Size 653B
                                                                                                                            • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            logo_32.png

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_32.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            logo_48.png

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_48.png
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            logo_64.png

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_64.png
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            service-worker-loader.js

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\service-worker-loader.js
                                                                                                                            • Size 49B
                                                                                                                            • SHA256 3ac757f49d04af7076f9f1af2ea33c2ff4d77f5f3200821153c520b4c58fb873
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            favicon_opera_one.png

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\favicon_opera_one.png
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            reader_mode.js

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\reader_mode.js
                                                                                                                            • Size 112KB
                                                                                                                            • SHA256 4f72bc46754ceed048dccf5c83fa36067f144e5ba13b046b12538808986e3252
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            service_worker.js

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\service_worker.js
                                                                                                                            • Size 74KB
                                                                                                                            • SHA256 220fca4d7acccb3242c07ce434e9b97dd48d9fb111c71c01c0c1b2dcafb35176
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            spotify_frame_interceptor.js

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\spotify_frame_interceptor.js
                                                                                                                            • Size 5KB
                                                                                                                            • SHA256 a6b9c0dcf141b8ac58176b870851294e492ecc79a83c8efbfc85e35cb3cada0a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            background.js

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                                                                            • Size 86KB
                                                                                                                            • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Icon_Light_Neutral.png

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            popup.js.LICENSE.txt

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            rules.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                                                                                                            • Size 839B
                                                                                                                            • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            000003.log

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\000003.log
                                                                                                                            • Size 18KB
                                                                                                                            • SHA256 a4d48b60ef75a985e249e01ca8b295a06c32d521d4c7b51bec1d3b268b30e1bd
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            LOG

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\LOG
                                                                                                                            • Size 367B
                                                                                                                            • SHA256 0d4eda56eb5b3ae5d4120d6a00e9238928a5436314a43f5a2ce73463d89e4b38
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            MANIFEST-000001

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                            • Size 23B
                                                                                                                            • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            2609deb2-0804-404a-bc81-53a7b1068386.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\2609deb2-0804-404a-bc81-53a7b1068386.tmp
                                                                                                                            • Size 27KB
                                                                                                                            • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            2c905ab3-3f4b-4895-9bb2-e31b53cf05a6.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\2c905ab3-3f4b-4895-9bb2-e31b53cf05a6.tmp
                                                                                                                            • Size 27KB
                                                                                                                            • SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            3d96a6da-8f52-4f3e-9f9b-f5cbc8a8f938.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\3d96a6da-8f52-4f3e-9f9b-f5cbc8a8f938.tmp
                                                                                                                            • Size 27KB
                                                                                                                            • SHA256 68c23af61ff2bbdb2e2eff18776c62cf64ed6ce0a9a12d1def8a2c884d09132c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            6d73f726-44b8-4828-9c81-77cd667191d2.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\6d73f726-44b8-4828-9c81-77cd667191d2.tmp
                                                                                                                            • Size 27KB
                                                                                                                            • SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            8ceac9dc-b36f-4bee-86d1-519337111f86.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\8ceac9dc-b36f-4bee-86d1-519337111f86.tmp
                                                                                                                            • Size 27KB
                                                                                                                            • SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            d366454f-da78-4285-abb4-560930925f1c.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\d366454f-da78-4285-abb4-560930925f1c.tmp
                                                                                                                            • Size 27KB
                                                                                                                            • SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            65ed0243-3b16-4cc7-98d7-538040d647dd.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\65ed0243-3b16-4cc7-98d7-538040d647dd.tmp
                                                                                                                            • Size 59B
                                                                                                                            • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Network Persistent State

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 28ccdc8e24c5e22be89765f2841b6419924b05c5a83259a808e5f85d9062887b
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                            • Size 12KB
                                                                                                                            • SHA256 9c4050413fe2cda6627d4f122297f1057b9e42c9f579a9d355b4d3cd866c059a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
                                                                                                                            • Size 13KB
                                                                                                                            • SHA256 a17f3b20820c5dd4b945bf587511045434bbe7ce3d587ac3f5041a2fdf2cd63c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Secure Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
                                                                                                                            • Size 118KB
                                                                                                                            • SHA256 527e6363e62b2ead9fc06d6cb417bf8edaaca7ba60649c43c8d1c1670aaf4b64
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            index

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\4764ce70-35ad-4cde-9263-bee6106250a1\index
                                                                                                                            • Size 24B
                                                                                                                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            34da751a-a57c-43b1-af9c-5c0bef1b3fb0.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\4764ce70-35ad-4cde-9263-bee6106250a1\index-dir\34da751a-a57c-43b1-af9c-5c0bef1b3fb0.tmp
                                                                                                                            • Size 48B
                                                                                                                            • SHA256 6918ec4a2b272193c60b19e84ce1babd80cbdb8ee160f06ab62665ef6b75c31b
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\4764ce70-35ad-4cde-9263-bee6106250a1\index-dir\the-real-index
                                                                                                                            • Size 144B
                                                                                                                            • SHA256 5a41c131d50bcf8983069ba04ec23651bd6d9a1f6175f25cc7190f044f56b2c1
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            63cc90d7-d91b-457d-8c69-d12f058aafe9.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\63cc90d7-d91b-457d-8c69-d12f058aafe9.tmp
                                                                                                                            • Size 141B
                                                                                                                            • SHA256 88a1be37d84f60fc3c27eb042924303a9f642cc65e19206bd1d78cd54b2806ea
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            bcd9ba56-809b-4a5f-811e-d9773ad21a61.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\9f7b0af2-c559-4478-8891-d143811892ff\index-dir\bcd9ba56-809b-4a5f-811e-d9773ad21a61.tmp
                                                                                                                            • Size 48B
                                                                                                                            • SHA256 281b1cbac17c627b9a060bbc31bb6edce48d18d475bce1987e97c56d19c57490
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\9f7b0af2-c559-4478-8891-d143811892ff\index-dir\the-real-index
                                                                                                                            • Size 96B
                                                                                                                            • SHA256 4bfa1db3328bc2457be499d6c322d7122db76da0461f5a4fad492b8e97b3c724
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            index.txt

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
                                                                                                                            • Size 208B
                                                                                                                            • SHA256 8c0f640ec9ba724ce801ab61b1cf26de358529ca17774ba8d7c82473c0f91c56
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            index.txt

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
                                                                                                                            • Size 203B
                                                                                                                            • SHA256 e2343b46e1bce011cb04cd3e9774cf13ca5f2430fe77acbf7cc13097fc351997
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            fa813c9ad67834ac_0

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
                                                                                                                            • Size 46KB
                                                                                                                            • SHA256 749ee1872cad1e911b636fe9878bd5069dcba6da34c76056099a1aafcc4eb80f
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            fa813c9ad67834ac_1

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\fa813c9ad67834ac_1
                                                                                                                            • Size 110KB
                                                                                                                            • SHA256 8c5e5117a72d728218b8cbe9e4b8e87a520bf4f8b5ffd7f91a50fdb939fd05f7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            ddba7117-ae8a-456c-b7e5-d4b30beb6c81.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\ddba7117-ae8a-456c-b7e5-d4b30beb6c81.tmp
                                                                                                                            • Size 72B
                                                                                                                            • SHA256 3e1dca520bbee437994dc2f23c831f663e4c0d03bdb832daceb0a21ed8b052e1
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                            • Size 528B
                                                                                                                            • SHA256 f99fe699d88be829ea25b95fd12d79b2fb0551828a377e7db3dc7352b8ea94c4
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            95a359de-099b-4658-936c-60b318c96327.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\95a359de-099b-4658-936c-60b318c96327.tmp
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 cd976fedc76ad08a7e89207fd7e78cb09a9f4b196a99b158d3bb15e83f5b7625
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            e4f0c527-15e7-45d8-a670-a9091e145dee.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\e4f0c527-15e7-45d8-a670-a9091e145dee.tmp
                                                                                                                            • Size 429B
                                                                                                                            • SHA256 586cc3fa2a3c3c7893c449af35b903835713c1f56684eab91a6e6c2125d3c9f2
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 541B
                                                                                                                            • SHA256 fbda8296d5e45f49c81c1ac926afd852f49d253215c61dbad7b34845886e8731
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 653B
                                                                                                                            • SHA256 0604c7a4a2eba6e8530e8c81fc25e6e8523ebeec50a2baa874af311b449878ff
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 c306dff567cadf82685eaf4a935ac5d6f6faad0cc631aef12ec9956395a82ee5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 ec7935f481ed0775c5858509a042ea70defe13ca58a3c4e5d5b5f91f275defef
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 9a0f05a4eadb2312ce76ab66b40504325ae02354c974b8fcf8e0ae71de04e69e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 323ebadd7bac7347461b5499f742fae02a28e7bd6e8675ada1f8a71ae1d2a4a2
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 b3bd9391b83b6acd720be615fadbfe2bcf65804834b8ce89e915b1fc92ef77fa
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 325996cea8d022a088021e9632bfd752a2c39ebe64dcc63800ba0725bff7778e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 f987ad4bed00b9b726de94c7aae4be65d7eafa86a6f3369e2c5d8a83c0804a00
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 dd3707a247f641c58b167199469ad846e872f008d9ee384fa85807c63cb65645
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 7c28a3f8320f0a9338713b92975a1c91f789487806dfa0c09276b471230d2130
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 d2cc1f4cb95b9140393c6de16c9b193c3ecafb681d0aadc13a8fb9a99af83c4c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 5340c4d1bf3be9f8c08e73f2aaf910e61e5a7bac5b1d2115b5706cc974af50e9
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 957B
                                                                                                                            • SHA256 c81d7f7325d9f26ef177be1f961212ed49b2f7e4776c37fb29d4a4c97f9662e1
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 cb64f3154385dd2dda2ef6a1af296e5126731cdc17b9329f8b3c3081dd86750d
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 c7116462c5a08e922516f646dfadaeaad2e92493a4837093352811c9c3f896be
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 39f755d34d5a264d9b64b41ce44cc2fae0cb7876eb4b8baeda9aa788a8a62495
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 fe41ba70a67ee92dea42063e0170a82cc54c02c8a9d2e227a79f5b7631e21bd2
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 8eea6bf91ff1029f69ca2d5f041a4c71644cc99ebc460828aa1bc251764e73d6
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 f12d70e3c976a7fda3bbb856ae7f328d29cd80379887a1da409aec711d8a86d5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 131ef8ef3ad7e31a989ce4582b190e00080451073b621c0b645bd98efe6be602
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 5f2027a56d0c68e44956bcf50f15528f3b1d977395c8f092afaa976c832e6a54
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 8e18c2faea25ced1acd2cc90138e7b0e728e81b1bddec7e25bd2f4a10b9be8cc
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 fc74b2ae9026a1b5295097455d21797e24ba3edd90196ccc1a9c3d3c93496528
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 7d910a5b2e2b7823bb35c790090554b59c1812074057e2f22e9efba8bd50037a
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 470c769a7b9e455a23cfb1f29f08ea47581d887ace0f20945bad3517130eb2ad
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 d4c673ca0c8c6774c5c47aa37cfa310d6c3c7609bbc2dd5673260ef5569c14c8
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 1936bc5cbb311846f459022600570ed83cbf013ef5f826e448d4650bf2751ae1
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 9aa3941fa4c8f59be3bb5acaa0d3b732e4dbc96fb5772ef77fab098b1123e61e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 99c1358798b7f3b4b74f83de0eabbd452cf7cec739d0e69dca5d5aab37f3466f
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 0a890845d8a95517db849e5ffc06c72066b2dae5912378fcd8ae2b380a4827d6
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 3a2cc84da3856e45a8a6e292052f50a2ba701f9ffea773f264ceccd9ab4f7936
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 8229d740b3fa661e5a229243a6c8150135246a9f75c0e42ae864c177fedeae26
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 e72da30022218e81396e2055dbfa4bce12ea98ee9ddd456b87c90c833383813b
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 40a708ea9274f918dd3baf4269532a3b502c635a1037901edf4ec97b4fd3047b
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 8de09acd9da686df6c89f54a2925f1c0db4ea78cd87edcb1f9df449c799c690c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 781B
                                                                                                                            • SHA256 f53bd2fde159f77030d9a20315c618052ecd325bfb4a14f4384361308fd7180b
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 b89932ff7529d1464db2f1a8bb2ded07a5d73e988074fd443a3d4c538aefca91
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 170bd87259d470a00dded8429c013fce4cf1c8054f77a848ad94d822faef78cf
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 e382e676726fa11bac1db574c42be8fcff041fe94efceb562a7cdf751c2d2729
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 ff6377a2e8614989536179b4b49d28e5d9ee5e70e3ae70c5e2e0a782cdc91305
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 e85126162c989bf122f51d8ab784e7650b69671489d4758f6fc05cdf38989036
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 0dac2244f40a64f355167f30ad4fc3ea3ad6c371106dfeda7ebeb54eac6c0523
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 1212da006ec26c04fc0db8f1c2b3e36bb941959aef35a6997bc867b25d6fcd28
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 d509e6e5036d31b5dd59bcdb1f8cbf35419ac0fb8e8afc3e22338ab723243072
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 06dedc5326cad06b866a548f4d6c394c4711a0cf5883d65f28f05082c971be06
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 ff0c09a27b26516e91c6c83cbf825718665d75bf16a303797a4e22103bcbbecf
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 fc84d5d2d3c6acef839efb3159c33297f37e7460f19c0976f0fcd4ba42f887cd
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 e21081c7f81384f182864316df5a8a8837fe704a882580e1a7498a697978d06f
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 81d2693e7801c8e9b4df79034102875342eca684888757de5343afcec30550ce
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 d79fab1ee2190ed8418e4b67bf5359ea570c80cd248aed964bdd2da6d5a71780
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 ca4a3479f70d7a0243eeb254c3fc3e4507f96c629e0e0fb4f020a34bf95e327f
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 e07d01c2215f5b27fd6a77eab0d9d06abc023d29c11f3edee05091bda36e84e0
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 cdd60e0a9128bcbb228000d6a993a466cbd91643e1d394a2a712792102d8d6dd
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 896f53f8c719cbb6420069316c4cd9253c2af90087389863bdcea6ecf5d7ff18
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 9KB
                                                                                                                            • SHA256 0be61bc62c8a1ec85fcef5473315b09005d13fea01225dc8f7f4b3a21afff2a5
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 c30ca095ff99caa7ffe6cac189ded4c2f2c5b34adeabd63428e90235fdcb540e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 725e9ab315df8b53d6c05d4ec0aaf01a79e96fe02773ff4af6502ee971619bfd
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 abb1f0e137c6793d9eca34b5e5a0f43c6c8dbb8bde828f9818a9cd05030e02a0
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 85df38a7db5480f6ee00868ff7e3067108b19398b5665792b6d37d17dd0a679c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 90d0d9f993cbf0419a3395e70bc5960810ad687ffe637288a1e1395339a75e2e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 a818f3cab803136a7fdb85c53764477838ae3e507a24f40a81a4731533761a0c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 1ce9f387dcf71b0cff6f0b9e7135b0e095275f192ee1f2e64b89619dd5fb7882
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 d44257a641d9a3777a2889cc814c21ef85b84e9d5f88c81f5d4896cf176db582
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 b09c9cf23a7f013079bd34d3ca2ffaf6de05dff7e56af4019498f2951d4118ae
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 6d27120fe4d6ec7679c2e665ca9b8025a8f9677de0c469975c0fb3695c58062a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 c9ac7e8920c9035a6b395a671eb67961e8d17b1bd64f0dc464fcb736995b0d75
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 cf9f17901326f3312d9f20237d28a2b5c2ad14bea1abc4d1bcbf755ffe050d2e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 1d4564b28a8a5f330cfb096e2d9f9b75b16961b34d494ee6800981b84b39569d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 3e2a3abd707ee9c19f413afc5055f8c942a5e76f974e81fd189ab0b4f88a2dad
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 239cf86b7806dcafe137de10afa3f6648259713ece22dbadfbfc771b5f5569ed
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 0698ad26a45760f61a79aa498bb679c19c2235a45125589129accddc0f65d0bd
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 da4919ac40e41ce3dbadf5c86ec338324c38f4b1baefb150c5babdf45e66335d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 0b8f110a1b67ae93ccc1512bb620ebee9cf400baaa94e9eb815fc78265cbf6cf
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 5adeebedc1e176ca6333f84be985016efc300f49cac3abd9ec35f262f15f706d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 fecc79ce6beb595f872bf791546a3e4662ac1335a340184e5a515b55e8cf201b
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 a9fd5d62a8891ace0d5a7112f09871ec2c59df3cd3d609319cdb15af0b8372aa
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 73009d1c9b9aa3830a624b96a863249eab58620b86ce05143885e918016d8a8a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 653d3f55753913b2321d2ffd67a03238cd421295b8b7cebb5ff4c266158ab39c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 fc354acd502503140f457856e0cdaa6994a699e6b7a3ae09c1c693a723ce960a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 d4ab5ee6a02cdd6dd3063cd8822b0656a93b124034fc0fe28b440159e7b4f2d2
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 993eb29dedd91f30e0ef55178ed6228d6b8cc7affb28a2a831699788bb26b25c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 b3ced98d2758a98bc4dd7d0829eb3bc76b0a26d6b7f1446e5fee8207c7a08a4a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 764540a9ac313f331c69bf37e6c9d8710eefd8744d46d63c88f7d0c8d4a575b3
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 874ed1227d6f1eb13085e951632b9b4eb0444b4343a32f5d880410786b82d4b9
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 177806ae69af7868b6a165840cd4341767e487bf151bc324c96ab2e6d29ea534
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 206eba8771891f82b55f92bbcda5aea169474b9c9546af6f202e6d2cad6b1a67
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 90546a48ddcf9152df2ed18086c34c9e4d41aee396f6d8d6e62c8c5c9a522115
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 bb304c6c314d15fb7aa40b55c526b13b4711f55bfdc5fc26be77739074d418dc
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 5dc3ee89e385a50c0ebf0239b7abb1b7084af5fc854140d83c2c32cf9dea2a8d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 566c857252271e2c68e568d5afe3d472e8524db7163c0febd6741b84ebf1cd5f
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 ca659f6db6fd0dfaae5b02f86825505c4f1b0c0670336b215b36d98797a8ca8c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 4ff37599a397a3a471ff4f3c7b16f4fa68a418c5e96c856e4f0b577093ac53be
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 688b79ae4acddab76592716e3834e603aeb75ef5cb2fddb7e802cbb2b3968c48
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 3debf2bd97c9de79db6d5394e75cd3634b0d2aef9f0cf3edbb0ab52dc5e05d26
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 a4f83f9800d0de8547950a458963d7d2240512d05c7bdab5e032bfef89d69552
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 cb230058d5b4e446d1ca7a527ab2085ee13bdcd294fb2306302be9b738afb3e5
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 38eb49fc01f5996fcec53e95723c3b32ebe0481ae4e673dda39e86c6009111eb
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 6bddf25e1eb0c3a37925dd508f3e47c08f736014661db3130c612806aa5466a4
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 a70a93226a5d084e8d187a644e5bd22a57d2f3db50d120bf3fa27772b5438480
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 026c50eefa6e2b1219f6f5bcc35ce377a0acab61a19dd591f7e4fb6f7a351e42
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 bd7c432511bfcfe50ccd6883aad39246a5b8e24d3be50a6c42dd5184ab227ffc
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 a6c603291ecdf07c90ac8ce80e1e9afef727f695d98794c3878313db4f9df02d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 dd59861e3c17220c24b5c5fd6b3055c5835bebb8d492f6b727c69fa0279fcf4b
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 d45b5aee016f74a0fc42d3c54e08b0dc9b09799bed1bcb6ea66b38b30c12e784
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 612e004cd78e8bc3a95a3a2f1f6572f29b270e5b783842dda4596f0cbe40a116
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 4c49b44eb35993410f6ad75e0c3c0c7a604c2174d84e3db87764a0e3cceeacdb
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 1a526cab740b23e9b3acf043cd7f76e44945210b8cb37f5fd0ffe871ddf57532
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 e2c6796ac1f517f40f41841c81c1044b3372bf0d3043ca10ab78c4750dfa4a7c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 eb9f5f4d78041a11e9bdff859a5b0f5e89c39b0c8d0f7cc8d9154c242246bedf
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 152987f39224b1ff80f17c726c30be50e80dd4ff6b2458b66f43211fb8a3e6a3
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 365c523d6c1ee1c8303717b9dad5145e8e005e7cdd6d550dbcb5b934ea2cdae2
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 66c2d8d2a99a07e158281c4ab2da4c328e953683738765ca91b7f5fb25030186
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 3bc26b7b2eac76545a3fe839d78df343ec2832ad885604375190b00a9a2f9415
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 1cc6190e55bc3944b73c2b02f188d974e5006ea2f2c6dcd9aaf91f17b787af00
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 eb76b4b0e669bc884622d7b893c1f1db9d13343508a56891fb970c63298c08e9
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 694bbf4157435e92600f20f78c3dfb75e0b5637311ed10a4e81c60b3f3f3b188
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 9989c7184670e59e7f7d8da26fd2a8ccf924fc225b7d7a1adfa75d3b3c4e0468
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 56176835ecf1fd7e3e4d47a28303cf9da2bcd51a0da8a5e2f9af546ca9094800
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 13ec075f1aadec700a5f21e9022d31a3a60619de65b8e542600825e3c5ad8357
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 79079e8410af872c800f1b0725af287f717302089d350a2ba806c64523b6c349
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 e8b8bcc5de4a1c6ffdfcca1cbef5cfdd098d6262501acf6755a6ac47292b0466
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 f0b670ca0306e57f68c63624d240c9e44cec016e6183b5d104a64e67c4922ed7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 c2a86be1a4c7238ed8bf1797259f06a686b2045adfc7a22b1d5eebbd525e29a2
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 a812051972a9dea44807d43e78c24cf92e691603198dafa119e56780402633ed
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 6c43f707fde17fa371fba853bfccc4ef49c67f96eb7d17364814551b037dcb1c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 bfc911d188bb4dc9aa98a5ed23c88cbf076b3aac5cadc98d136aecfc88706ea6
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 f5c0fd4cf1d681ca2f98a62863bf87746980ec2692e5130c3a1e961ec73bf8c2
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 015af849e5ad6cb362b3501123990145e01118d62ac9fea712ff054c6eb244ba
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 5719a805db927dc9f39bc95e74b1f8bb963fef0336fe2259070615cbabf8e09c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 8f5649329cf3f8844cf9dbfd31560436deea132e56c3c80e16f3a251459d2c1d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 5b8595196d9cd682974fbc7123667a827afac4cdfbabd794713468ca3700468e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 975881cfccc17c885679d21c057eb170d731dde114dad484218e0d0022615c3e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 6d1637a7eaa86295e1f86439e6da735495d68574612bcdf8c28215d1773b66c3
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 69e34fc9fbea160cd4dae2b46364188e7c033d8ca38525b13fcd2459aa072885
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 a8ecc83bcd2426d6932721fe90a30482838423a186ee34a68e92891786e8367e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 d01e0ef0deeccb3d2ee8312626b8cf1b5e18047a447f0fb7a24d6eae4a3ce09a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 a41194d89234313e36202fa80e6575a8597fe2ef34526cbc85627aab9c6e3df5
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 5a5e61182798d47ee6e019b2f0264fa5335d7d60e9c04917fdd53d76adddc6b8
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 d715336e31982a23172d13cbcdfa38e99c94d53c144877657fb574c092eb1463
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 959d79f9f4eeb7532ef6f254c045bca86de46fed5b3b41d61fdd1dbd7b37f939
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 12c366f09e4bfcf623563fa12f78bffde19ce8fa7d1b8d6529a7f4bad132c314
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 a0586f00d2e7c6bf361552aecccc70801ba30f203c953e08e0b6951b09c7621c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 bda9f509deb85728a17220824004fa824f47c3d7c3e2d7da7231761cfd4a1e37
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 7a58f5b9430c8df2b4f9287e3ff78f2212f26cf82d0d83aa56e290ceb3fe7723
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 2f0b090b31f4eef42c2e23e84e727e63e6174292b0d3070eff8ded96aa9da7c1
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 611b5ec071ff01164377f10c29d55e2720ec8754c081602bd3b7d22f5bd2f1e8
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 42297f69dd0a721eff8774705ffcbb6ba45e7b96973f354517dc3864c5cba014
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 c8730994619c5b28a191d53cedbedb67caba0efcb31ede65389b76f6f8c8fee7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 aac608b5d2487909694422d0b1eabd871bf32d6e9d20e80f64d5a6ffa813abae
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 d45f23f1081f4ebec8450171f4e1b52feec3b1717d857f1d52457d5c00d8b8c6
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 e6ee586612587b103e3a0c23abfb343d584482e55c7b6981af8b4111776af756
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 a5b0506be4508c6f77f7c0a0a50d006f930296b2808db38b8395dbe1514e6f00
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 30eddadfd66840558ee914f227db1d48671898ebcc91e13a6d8756a7125f3c88
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 cd0fc0c6f62543bd7f63d6febe766541ac8dffe19bbda405bbe61ed7bc7c0630
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 845323675b1279ff03d6c084616b57faeeb6174f88160fad33e04275d98f3b02
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 2c8ed8c7beb5b4d0964b0299be3720b83bbfd7374c116e296481105065230e0f
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 03f1f2d46e55cc17371e72354620efad54961e7ab475292b3eaf0f2937084dca
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 3ea02ca3c204c07eb02f7eb7bacb2f870bdf8ee766930a518ef5a84bf66a594c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 b44b89a341b99aa6b1f70d25210601fef967d0df00ca597e5cb7f61e2edb2e02
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 5cd23d334888bd7215599527d6d8a3949d8126104a71390fcc9b0b0fdf12a85d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 ca61c230b0841ee942fc223d4440a415d4bcb2229251262b6649b7c6ccdc14f8
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 ed63c4bfd11e07298c8c87dac46b6471ff54ff54f73240bbf53b3dd8179eb7c7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 1b59edf9804de0375d2b0b7e5fa102dd19c3efcd25061a0c5b428e7faa7120c7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 907388db3706178667216f9fd01af533262d50799fce244b37683ff51ab2a689
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 d2a875923aa9e3a3a4360358519c56814f9b291b6fa0ae1ca3f599334eea3467
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 b7ee0c8ba5d784388b7501dfc8601ffe9dcfdddb8752836d6590cf8c9ac9c0ab
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 91126a7d39831d3f62bd043f4519977395152c0d1e1c56b21ad913a15ef1da1e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 224f230be2c1108c3a8df25c9a0df07ac8faea7006b93b79c71237ffabc04e7b
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 e0ff5787474d7d61f10ea24ff5ab9b6e2a5f292d0a9c9a77d998e698eea6a5db
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 93bf2a7d20bdc691353d8a69c3f0f312b940bad5a1c9613cb6bee6e7f6e5c454
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 0debcb69d0205f2e6bfbe25930688c388ac8bcaed45cfa45ffc1069d0b73b042
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 a569e5633c307b4a0e5052ad6e815e6b3f4ce44276a83d5819b4a475721eb4d5
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 40dc3056913e1ea09a6f497c521c27220fc6ccb54a8dc33df7454af0f49ffe44
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 df2921fb7f104e2b03a727d1734e8373eb41178785f405811e1fa4f0d5dde840
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 bdd7a73e7713b2cd7d67537954c9e24b936454163024bb0f664eff8ba2d1e5ff
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 021dcce5bef7f287a5207bdbfa9c230b95756c1cafa09f51c5e7c72e1c6350f2
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 efca76320f078ed3d11df4b1e3dd0c8e3733b715ee6b75b582b2da3ccb6c4cbe
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 5e32c701fbb5c15e81d7163ff27b6bc9006097c29eac65f511a7c3dbb139f78c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 c5574f8815248fb26c276d5d769d61ba69a055c8bc344f8f91e46e5d5d93e97e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 f9edcd9e40eeae1bfa49be2d5d0a49af5975a1568aa725679bbc213c881e2fa5
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 2c653cef0487f6c94625fdf36d8efbcd13ea2b3d9b215392431d051db938e273
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 e1eec4d87d3cda08fa0fc485c3d91f42ad1356e9b4cc2ecf65caf21d06b9ff7c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 a7cc1502a9c3fb8833315f553b2ede2143e3e816939453ddc511cb5f7d62c286
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 6ab9a0ee0d431e570dc04d13dd10c6c674d42c9639f5d2a82222507fd25b62a5
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 b19b2d28ba0cb57aa9bf2e5130bad099de0b8f4fe7296769cfe8bdf6c83f2b52
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 3e9ebf1172466e4d3e703f876b338f7a001ecaf2ba43d7c4d9fdde90f746f80b
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 bbdeb06c08c38060a4b8d58edcf7b1ff5f4c381d094e959db07385aa203a6f72
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 18cf7fc799e59368fee63d3e1929cba4d38b05eb78d41db51174183b82a8b151
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 69d979aeb9b1376f206afb09e86f4dc3ff0febd15da89b06ec920013e60b45ed
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 7c6cf0c02741903817feb668a52dc557b06b468d8f9f7c81769b2c43eb512d42
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 a9a0916fda8223ce5f635298ff86cacc7a9e0072949a0eb59f34a9aad2686482
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
                                                                                                                            • Size 11KB
                                                                                                                            • SHA256 496cce1feee6d84344b1ab189365880a80db10ce9d3d204486185f0f3ed68094
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            CURRENT

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\CURRENT
                                                                                                                            • Size 16B
                                                                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            MANIFEST-000001

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\MANIFEST-000001
                                                                                                                            • Size 41B
                                                                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            a3548ee4-0798-4560-bb4d-87e9844c35f4.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\a3548ee4-0798-4560-bb4d-87e9844c35f4.tmp
                                                                                                                            • Size 12KB
                                                                                                                            • SHA256 8429048d02b50d157b932bbd4e4a0d95ffc8e84ab744ae48b04379b180131c4a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            e5b51d51-1dac-4758-8778-9603f83ce010.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\e5b51d51-1dac-4758-8778-9603f83ce010.tmp
                                                                                                                            • Size 86KB
                                                                                                                            • SHA256 92be337ad50e1a86a3a95b259f1a477c1079bd2a3f5c929179acc9cc1ab472ed
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            f5d56a08-6072-4aad-9a8a-3187d038e835.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\f5d56a08-6072-4aad-9a8a-3187d038e835.tmp
                                                                                                                            • Size 171B
                                                                                                                            • SHA256 c3bba5050ecffa480757443aff8243f65194369f4454d0ac1443a1858951ed43
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.0.1833969897

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
                                                                                                                            • Size 548B
                                                                                                                            • SHA256 ac61c17e130d223362b4c2b56ac6b8493fefcf63edee9fef995772667f59f387
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.0.1833969897

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 2908c8602316ffa1fbe1fc2dffd2da4b18933836dbccdf70dcd1b16f50f91fc6
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.0.1833969897

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
                                                                                                                            • Size 388B
                                                                                                                            • SHA256 6d646eac6a3751a75bf6a11d0289e7edb9616593477e8247f2e8d0bee79b70bd
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.0.1833969897

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 783bf09878f313113c481e4fb1c178124ae5e9275a3f094623a4f55ec45cf572
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.0.1833969897

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 33d60bf4c02ac07b6873c4693a1970f3054f80f3e6ef07819f041113768fa420
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.0.1833969897

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 cb5c1ce07d880b30d672a24e06d76aeb9ca51c434f4e14389f1a66b6b9b1dddd
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.0.1833969897

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
                                                                                                                            • Size 486B
                                                                                                                            • SHA256 bc0121237467f27888dd32ba567467b428f26e44075d69a49fc93afe7c242d26
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.0.1833969897

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 8ef5eae5a5215de7b742fe30d11a84d730cb7e8dcc391617c0edcc08c6d08e21
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.0.1833969897

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 6c1e8b7eea7ffb441c1570e84fb9aea9f55c3743ef2fc5e8fb910987c674b6dd
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.0.1833969897

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 f2a2064d5c424c2b609db6b379b551b23c3b4bc4e8c8a8a8cbb35e5946f8363f
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.0.1833969897

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 b6da8832822938ea812b18c046b8a776e52eb27405f37baa40fe01a7e357e517
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.0.1833969897

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 874c36f71b8640812a7298e26f60058d4ddb21a1cc35c09e53074fbe8b313c45
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 200B
                                                                                                                            • SHA256 f954607ea3b781384b1fe9387e8cccaf39b8e5983c1d9c3ad244f1be0921671c
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 997B
                                                                                                                            • SHA256 b1f49df723676ca45425e5ec2fc33a0b86cb5ac1ba6c6ba1282e2e69ad8ff89a
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 7032742deefb43d88880ffa3d6e1ac9d5f1d41c686325da15f2581d056bb2728
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 d0bc32a744e4911e98f24a9d23cf058d39eefe2cf4bfd12bb785ff4e375be1e3
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 7f3a4a1e1e9fe2afb0246223c5cc802f9399f0be851c038cd400d43cd5f8dc67
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 bbc3b06c33d9048d4208f2693a23425b17a9d3f168814ae74fb6be4c50e271c5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 c72b6e76518fff6a389bac420eb539a2d25ecdda2509178310e5e774aafd7d04
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 d76736b245d5f8db582172f13cac37e1b72d4355eb51a3349b210ee9b5e2d869
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 631B
                                                                                                                            • SHA256 d39551b8719eaa5df923ff3a1d63bca15b34de1cd87a9e748141f307932ca52a
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 724B
                                                                                                                            • SHA256 0c62653c7236fb75233afd527f28ec8c56e8555a725dc00878abfd758f586078
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 8aab0e77d29b4dd44e5c8e2057e5346140912665e49b69da3b31458db72fca28
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 89596b66536abfe7d785efa5c729fa789a9b64a0ed3f54867636f29a4c1d8be4
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 922d1e7f1075c37af1fefe2e206afbf4cfd8ace9e2afcf4bf0eb46a431252448
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 2011caa34817adf471f7c8ba8452b529f2eedb3f63ccc09a4eb3f4cc79e924c4
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 01e973ce6b11d0813ca24551b1cb819d52e1f97eb105a2b3ee96f4435a02476d
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 06047f52480e9f9943dbed31ffee5cdcd57242807ec4aec51f77d1775c9c18b5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 e6f09f7d4af6ac973a15cd1081db328b8a8b72c0e5dccec38775ba23527093b8
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 26878782811c372b80a109335e03aecfd599e8b0464562e2c833ab1fc9532bac
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 904B
                                                                                                                            • SHA256 e52442233599d9c7eef8688c1ad4c6a51d17c228ea411287e3ace92f26df2a46
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 7c698cbae120c7eb40c2fb5b3da9e851cd2d3bc62d99b6e8c43128ed235eb53e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 9c15fb279a62d0c3c470baee1e16744cd1da1e875bde910566f2d0e6ccc9a006
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 ec73cff8e579acd4d6b00b03f7e75ef1f5f386b4a6703d8cd32ce0b3cb77805c
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 58be9777bd8e010299a36139489322db0ecd7c55154aa1f5f22892af100dc317
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 446B
                                                                                                                            • SHA256 97412cd2fe63c0c88fec1017e86c9ba56aa9d33a44f0577f69973a961fa13a99
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 539B
                                                                                                                            • SHA256 fef0a0c955eb2e2b140a6f59009ae03ed17ca0dae1414982bc07ca5d5e4697f3
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 81b6b3724094dbb562fc1c94808875fe6c462311136879413ffc4984678f4f97
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 509978da96c510da38ebc7570a5d389b6071dd2bd9c8d8559310e2f3a3f59989
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 eb274f16dfdc474bf2d292d9090fae920727203500800a1a655eda5a345ddfe0
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 27edfedbefb01358fac9221ed67e50e9c9ea9a7fee55b3095fdf11ff289408ce
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 82b11f99138d891210a5e2ef23acf7af1980549f6f0ad7b0951285aad53cf5e3
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 58fbb7c2bd4f849d018467fb4409d8d788f07ceb7f18a455c2cc1e160d8b53f6
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 6ddb8e9e0a3f49076cf80075059f5a88eaaa14c615ea07609cdd652d819bc36d
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 813B
                                                                                                                            • SHA256 620f0b3d2c378ae4fedb6fc93834fec9e5d6a8c8b7c768c1b535e2d26001dcb2
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 71f4ca86174e5d47c728ba8639308fcaf1aca7ec9941d267a2f9a7a1b95c05c6
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 bd1df051e7c0c1be1250f74c43e986c93ed7bf4e40235bd1b326fd5cf09407e6
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 5fa7e432564529b596e8ccef8ddcdff9c1ad100cefc1e19e7f0a969f490b44e5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 a4c8b41c058b51bc0874824c323cce3109e3388388b7f8c3907b217bc8720f54
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 128c4b26ef3bac0cebd6bf463f5ed3dc5b714295626319657eb552a964a4c325
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 28b4fdab94575d9195492e13f11e4185e62b9f552f98e46a92d9dfb81f17ad10
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 425f6b4325e06b3e10d98c553957a83a2493f3edcfcd983aa26638d4d1a29e33
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 186ca405c24b103bbd9b4e32f84d428a11a6d77ef263e34091db59850a29c7eb
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 d8fe3cab3d1ea17422cf9eb87a03b6ecf7915a137a1f0725eceb1b88925d82c9
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 fa9a4961886301bced037fa02919830de3066a01f6e17cc58fc2c1a4102b98bd
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 c43aaf4a408bbe601dc97b94e892a50fbbf3d2c5a02708d0f71b41fcc45390f7
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 06402abbcf78cb045a74035b8742515652ecf6d01ba4a5304d5bd32e87a83770
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 8e3a985f3d93a5bad464dad288bfed84ac7aaaa0a9c2695e0105a75fcdcdc60b
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 59c0f03a9d959cdefff8a7e84df4441e7b6881f31de6489f84ffa2887056821e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 69fc19c2c107a9881ff0ef07207ce0e20fb19855ab18fca2852dde2c803fbca4
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 218543ec7c27f92a153da78a1bb4ae4b1899bde5b2861b29b91871cc459c8f95
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 b3d1a593ab0d4a932f94977bbbc6abe496a99ea8c247151adc1f405fc5f82dc3
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 1ea3e599a3ad771c9a67119b8f1461ff94f7e7096afd2c08c04382ad6c95ddb3
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 6f56396a7e11ba5b462c13933ebd846adc7945d72dc252d3685f57d66f6c8b83
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 99ccafec55d3712441a5ed2221edb1aa834d14f0252e0d0bcb61671ac17c060c
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 fb5afab3e0f4a308e26fadf910201f093fd3aa8f191681f6a6fa4901ff1bf363
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 27e949f42a4b163d6d6cc0fb680d17df4640dfb72eaef098a292cb07b7bee245
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 f0ea3129c088466d430e5b6aedf06086f63e9141160ba900e511a559dd3f3a33
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 7df6406161f7ab4db8255ad6aa0b60eca9c8998460ce5a5d9b149b70fca467f3
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 c80924595a444f7b2d9f55ca21af69122a0e337b21f96f8845e435df011e2974
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 d79944e8f259806cdee13b6f13f7682a14646fc9a059ad5aedae77b605706a19
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 052382ef6de2b16c56a8d424d85d1e9ae1b21e3ae66d741a224be6782578bf28
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 eff1bc06a17d9228772e1a68173ace97f26a34acddbee3a61b7873d0b3e819d6
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 67a001cb74b0c3c31ca067032944a31af8eb2c4c465e69bf01a00eefeef9326f
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 2da0cb5901bec9d5aa0a46aff4ca8591bf5804f37d2a4657101bd989c166d1c6
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 729b7cbb517a0793a04a7564704a73d7ff97001aef4447da091be0f78481d185
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 79c4f8525022699bc6c38538f3e87cae5cd8a433cd5a61fb6d1fd275f56d2824
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 8cc1e3892880fa2831f0dac4c115b8f74a347103b24e5966c06ba82dcf8b6118
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 cecbafa6f26acf2033781fb4d252d96650f41e4e25028580492049de91733b58
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 86f54a16a06f0086440ced5f4738d78c20d64eea619188322d24dcccbb1c4932
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 181683d8fc1e71b1f92fd809b25301731cec20506272db2cba112b8f41a19b19
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 ac4f7be820ad0850fc4252c0f26e94f0565ff178b69eead23bcbd5bf50e6a1af
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 25abec40f3170f728e5846dce5167cdf69d930ecd7a22bf416ff8e29723c91a3
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 11f7abb8c9715f259dae64935def7316cd117de1f3fa15d350cef2baa76185d8
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 981c1eabb87fd914e8daab075d1a6b4dca3c3fd766d711dac6096035cac843af
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 19c87434c11c93406b49b965c41d58e71e3bd1ae52bf4d6ab47c8a2ced537980
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 b65b1ea1304b55bda258a451445ad09fa809231283745374b264aa75170e9c7d
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 974e57cca8ad7f381c186a57843b7c79ee4caeedbc822e3a4cd647a84249ab2a
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 e03da4a1f23288a9f7bf89c1d4395692598556af92fa29ef9c32706af3c9951c
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp1644.1.1888844879

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 fd4706f225d95356d1b838fa31307e0b07491a1d6218816141b64aa189afc65b
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            data_0

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                                                                            data_2

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                                                                            data_3

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                            • Size 4KB
                                                                                                                            • SHA256 a0a1bd17e39cfc30354edc081d891f5580db470362145721d1b44d9f155941f0
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                            • Size 4KB
                                                                                                                            • SHA256 64d0a6fcd93bed9a8fc7dd63d230b182c4de3f93c3f9fe896e85301729695812
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                            • Size 4KB
                                                                                                                            • SHA256 694a13bbaf85d95a273394464f6a6ff1ddf1971f5e9e461b6bf2cd12a5ef8246
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                            • Size 4KB
                                                                                                                            • SHA256 ce6a6199e6c1c718adc9a3d8eda9c54c9f19ff2d5f8afecc471bca669ac38de6
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                            • Size 4KB
                                                                                                                            • SHA256 2e0238ebabe8eee5874aeaf2fc92e24d7e9c54486c17d77eb7bee8e59b066b81
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                            • Size 4KB
                                                                                                                            • SHA256 d2d0f0b7fd6836a59f9adff2729698d74f837b5b469e795d164c7c2df9efdf27
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
                                                                                                                            • Size 4KB
                                                                                                                            • SHA256 61ecceb8e46ad4a38c929a6f41d7bc03150fc36a33267700b7c141fb2a93456d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            preloaded_data.pb

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\MEIPreload\1.1.0.3\preloaded_data.pb
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 9b32ba9222d44bebc479ffa9704d2a9abccae153982838a3b9a79846b80877a3
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Google.Widevine.CDM.dll

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\MediaFoundationWidevineCdm\x64\1.0.2738.0\Google.Widevine.CDM.dll
                                                                                                                            • Size 2.7MB
                                                                                                                            • SHA256 cb190e7d1b002a3050705580dd51eba895a19eb09620bdd48d63085d5d88031e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            verified_contents.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\MediaFoundationWidevineCdm\x64\1.0.2738.0\_metadata\verified_contents.json
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 43daa4139d3ed90f4b4635bd4d32346eb8e8528d0d5332052fcda8f7860db729
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            crs.pb

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\PKIMetadata\1733\crs.pb
                                                                                                                            • Size 344KB
                                                                                                                            • SHA256 4d604c5342cd4438e047f13d7349e0cd7888769449c280da1e8077157c157d0f
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            ct_config.pb

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\PKIMetadata\1733\ct_config.pb
                                                                                                                            • Size 52KB
                                                                                                                            • SHA256 164e0e5564866e848a81f28b40ac6cc26998aaca49c967efd5278b30aed2226f
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            kp_pinslist.pb

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\PKIMetadata\1733\kp_pinslist.pb
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 8990643ca68e590ba48da9a25235f7bf30f38204f416ba5ae0862385cd9394a1
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            safety_tips.pb

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\SafetyTips\3091\safety_tips.pb
                                                                                                                            • Size 180KB
                                                                                                                            • SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            assistant_prefs.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json
                                                                                                                            • Size 151B
                                                                                                                            • SHA256 1512e786c1c05b5ebf270c2abc451270e8ffe14586ce269c071dcf2c027aafc4
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            b444ca84-7d04-4ac7-af1d-10d5e03dc607.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\b444ca84-7d04-4ac7-af1d-10d5e03dc607.tmp
                                                                                                                            • Size 151B
                                                                                                                            • SHA256 54189afb5881c8bce1a4dad2412958e0c5999d23d86f449fc25963774298a590
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                            • Size 572B
                                                                                                                            • SHA256 6032ff117f6aabc11c4d30d51f940e920dd8ab1f75d174d6a6936fbe0195fc87
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                            • Size 908B
                                                                                                                            • SHA256 b821bee42e816ac21060be231fc0459cc31703e5eef4ed9eaea89dd34d9505d9
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                            • Size 236B
                                                                                                                            • SHA256 b9fb533e0692961868bce079b74b40f6e98f5a69b5b6595d7e08ce2771f8a853
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                            • Size 124B
                                                                                                                            • SHA256 c74727215e1ec967a558b5fef0b88a3901480bc5a2adcdac733717d2c4bd6561
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                            • Size 684B
                                                                                                                            • SHA256 078c6417df6984b22fd871e36f467fbdba6d185485f41fad1ca7e05a331118ba
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                            • Size 348B
                                                                                                                            • SHA256 c5cf19612f2071a1892925a5005ee027cc1d7f6f075613068339bda8f853d730
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                            • Size 460B
                                                                                                                            • SHA256 8a051bc8c7bbb2630d2121cb0e3b4e183ddab7eb8e1b523e5820112e2c4b1208
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
                                                                                                                            • Size 796B
                                                                                                                            • SHA256 303893e9af88d4e4cc707d45e24771d37baf212b86237d8044eb622b9f0f01f9
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Roblox Evon Exploit V4 UWP_56952442.exe

                                                                                                                            • Path C:\Users\Admin\Downloads\Roblox Evon Exploit V4 UWP_56952442.exe
                                                                                                                            • Size 702KB
                                                                                                                            • SHA256 35d5cdf23553b14ad8051f68b1af8199805f06479391888f609af4ed54ed5a63
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            memory/5376-917-0x00007FFFDA610000-0x00007FFFDA611000-memory.dmp

                                                                                                                            memory/5376-916-0x00007FFFDA600000-0x00007FFFDA601000-memory.dmp

                                                                                                                            memory/6628-4193-0x00000260676D0000-0x00000260676D1000-memory.dmp

                                                                                                                            memory/6628-4200-0x00000260676D0000-0x00000260676D1000-memory.dmp

                                                                                                                            memory/6628-4202-0x00000260676D0000-0x00000260676D1000-memory.dmp

                                                                                                                            memory/6628-4203-0x00000260676D0000-0x00000260676D1000-memory.dmp

                                                                                                                            memory/6628-4204-0x00000260676D0000-0x00000260676D1000-memory.dmp

                                                                                                                            memory/6628-4205-0x00000260676D0000-0x00000260676D1000-memory.dmp

                                                                                                                            memory/6628-4201-0x00000260676D0000-0x00000260676D1000-memory.dmp

                                                                                                                            memory/6628-4199-0x00000260676D0000-0x00000260676D1000-memory.dmp

                                                                                                                            memory/6628-4194-0x00000260676D0000-0x00000260676D1000-memory.dmp

                                                                                                                            memory/6628-4195-0x00000260676D0000-0x00000260676D1000-memory.dmp