Overview

overview

8

Static

static

8

TLauncher-....1.exe

windows10-2004-x64

8

TLauncher-....1.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    110s
  • max time network
    119s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    15/08/2026, 03:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    TLauncher-Installer-1.9.5.1.exe
  • Size 25.5MB
  • Sample260815-dkfftsxeph
  • SHA256 0619bd07d3183a8ae0cb1be408c6ad32295d47ddd666b2d51edd4d5f5d211227
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojanupx

Malware Config

Signatures

  • Downloads MZ/PE file 3 IoCs
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 20 IoCs
  • Loads dropped DLL 19 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file 14 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 14 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Enumerates system info in registry 2 TTPs 12 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 46 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 10 IoCs
  • Suspicious use of SetWindowsHookEx 61 IoCs
  • Suspicious use of WriteProcessMemory 20 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe
    "C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe"
    1⤵
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:6048
    • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
      "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:3969818 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe" "__IRCT:3" "__IRTSS:26673860" "__IRSID:S-1-5-21-3053180483-1881419501-3594244048-1000"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:6100
      • C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe
        "C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:2308
        • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
          "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:3839250 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:3869932" "__IRSID:S-1-5-21-3053180483-1881419501-3594244048-1000"
          4⤵
          • Downloads MZ/PE file
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:4324
          • C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
            "C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=0
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:1788
            • C:\Users\Admin\AppData\Local\Temp\7zSCF6852E8\installer.exe
              C:\Users\Admin\AppData\Local\Temp\7zSCF6852E8\installer.exe --silent --allusers=0 --server-tracking-blob=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
              6⤵
              • Downloads MZ/PE file
              • Executes dropped EXE
              • Enumerates connected drives
              • Enumerates system info in registry
              • Modifies system certificate store
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:4916
              • C:\Users\Admin\AppData\Local\Temp\7zSCF6852E8\installer.exe
                C:\Users\Admin\AppData\Local\Temp\7zSCF6852E8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.55 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ff65442bd88,0x7ff65442bd94,0x7ff65442bda0
                7⤵
                • Executes dropped EXE
                • Suspicious use of SetWindowsHookEx
                PID:5552
              • C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\installer.exe" --version
                7⤵
                • Executes dropped EXE
                • Suspicious use of SetWindowsHookEx
                PID:5924
              • C:\Users\Admin\AppData\Local\Temp\7zSCF6852E8\installer.exe
                "C:\Users\Admin\AppData\Local\Temp\7zSCF6852E8\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=4916 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_20260815040930" --session-guid=f35f8556-5bda-496d-8bb7-9430e65556e6 --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=7808000000000000
                7⤵
                • Executes dropped EXE
                • Enumerates connected drives
                • Enumerates system info in registry
                • Suspicious use of SetWindowsHookEx
                • Suspicious use of WriteProcessMemory
                PID:716
                • C:\Users\Admin\AppData\Local\Temp\7zSCF6852E8\installer.exe
                  C:\Users\Admin\AppData\Local\Temp\7zSCF6852E8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.55 --initial-client-data=0x28c,0x290,0x294,0x25c,0x298,0x7ff65442bd88,0x7ff65442bd94,0x7ff65442bda0
                  8⤵
                  • Executes dropped EXE
                  • Suspicious use of SetWindowsHookEx
                  PID:5856
                • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\installer.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\installer.exe" --backend --initial-pid=4916 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301" --session-guid=f35f8556-5bda-496d-8bb7-9430e65556e6 --server-tracking-blob="NGRmZDEzMzg5OWU5M2ExNDg1ZjU5MTljYTU1ZTA5OGNmZDg3YTljNzAzZmMxZWU1Y2E2MzhjNmQ2ZDIzYWYwNjp7ImNvdW50cnkiOiJHQiIsImVkaXRpb24iOiJzdGQtMiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFHWFNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhX2d4In0sInF1ZXJ5IjoiL29wZXJhX2d4L3N0YWJsZS9lZGl0aW9uL3N0ZC0yLz91dG1fc291cmNlPU1TVEwmdXRtX21lZGl1bT1wYiZ1dG1fY2FtcGFpZ249T3BlcmFHWCIsInN5c3RlbSI6eyJwbGF0Zm9ybSI6eyJhcmNoIjoieDg2XzY0Iiwib3BzeXMiOiJXaW5kb3dzIiwib3BzeXMtdmVyc2lvbiI6IjEwIiwicGFja2FnZSI6IkVYRSJ9fSwidGltZXN0YW1wIjoiMTc4Njc2MzM2OC43MTc0IiwidXNlcmFnZW50IjoiU2V0dXAgRmFjdG9yeSA4LjAiLCJ1dG0iOnsiY2FtcGFpZ24iOiJPcGVyYUdYIiwibWVkaXVtIjoicGIiLCJzb3VyY2UiOiJNU1RMIn0sInV1aWQiOiI5OWYxY2JkYi0wNzc2LTRmNDQtODhmNi1mNmM1NGUyODVlMGQifQ== " --silent --desktopshortcut=1 --install-subfolder=134.0.5954.44
                  8⤵
                  • Executes dropped EXE
                  • Enumerates connected drives
                  • Enumerates system info in registry
                  • Modifies registry class
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of SetWindowsHookEx
                  • Suspicious use of WriteProcessMemory
                  PID:3688
                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\installer.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ff7b3adbd88,0x7ff7b3adbd94,0x7ff7b3adbda0
                    9⤵
                    • Executes dropped EXE
                    • Suspicious use of SetWindowsHookEx
                    PID:5244
                  • C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\assistant\assistant_installer.exe
                    "C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=0
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Adds Run key to start application
                    • System Location Discovery: System Language Discovery
                    • Enumerates system info in registry
                    • Modifies Internet Explorer settings
                    • Suspicious use of SetWindowsHookEx
                    • Suspicious use of WriteProcessMemory
                    PID:6296
                    • C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\assistant\assistant_installer.exe
                      "C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x101cb80,0x101cb8c,0x101cb98
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Location Discovery: System Language Discovery
                      • Suspicious use of SetWindowsHookEx
                      PID:6316
                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=0
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Location Discovery: System Language Discovery
                      • Enumerates system info in registry
                      • Suspicious use of SetWindowsHookEx
                      • Suspicious use of WriteProcessMemory
                      PID:6212
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x10fcb80,0x10fcb8c,0x10fcb98
                        11⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        • Suspicious use of SetWindowsHookEx
                        PID:6312
                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"
                        11⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        • Suspicious use of SetWindowsHookEx
                        • Suspicious use of WriteProcessMemory
                        PID:6412
                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                          12⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          PID:6432
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_crashreporter.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x194,0x18c,0x188,0x190,0x140,0x7ffdf5656310,0x7ffdf5656320,0x7ffdf5656330
                            13⤵
                              PID:6568
                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                            12⤵
                              PID:6680
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_crashreporter.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x1a0,0x1a4,0x1a8,0x19c,0x1ac,0x7ffdf5656310,0x7ffdf5656320,0x7ffdf5656330
                                13⤵
                                  PID:6704
                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0xdfe2bc,0xdfe2c8,0xdfe2d4
                                12⤵
                                  PID:6772
                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                    13⤵
                                      PID:6840
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_crashreporter.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x1c0,0x1c4,0x1c8,0x1bc,0x1cc,0x7ffdf5656310,0x7ffdf5656320,0x7ffdf5656330
                                        14⤵
                                          PID:6880
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                        13⤵
                                          PID:6976
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_crashreporter.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x194,0x198,0x190,0x15c,0x18c,0x7ffdf5656310,0x7ffdf5656320,0x7ffdf5656330
                                            14⤵
                                              PID:7016
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream
                                            13⤵
                                              PID:4764
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_crashreporter.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x1a4,0x1a8,0x1ac,0x1a0,0x1b0,0x7ffdf5656310,0x7ffdf5656320,0x7ffdf5656330
                                                14⤵
                                                  PID:7096
                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized
                                        9⤵
                                          PID:6516
                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_crashreporter.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x194,0x18c,0x188,0x190,0x184,0x7ffdf5656310,0x7ffdf5656320,0x7ffdf5656330
                                            10⤵
                                              PID:6560
                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1768,i,11618502333527497526,12120507792837557979,262144 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1924 /prefetch:2
                                              10⤵
                                                PID:4792
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2052,i,273723317946516841,6705877855366244447,524288 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2056 /prefetch:3
                                                10⤵
                                                • System Time Discovery
                                                PID:7088
                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2440,i,7391065764509315728,12666156286449119745,524288 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2472 /prefetch:8
                                                10⤵
                                                  PID:5520
                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=1776,i,6677216920460576438,6789788422660592809,524288 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3040 /prefetch:8
                                                  10⤵
                                                    PID:1096
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3144,i,2071857938228644868,12196044814287585248,524288 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3412 /prefetch:8
                                                    10⤵
                                                      PID:3752
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3368,i,11413146431985319723,17916467624035686462,524288 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3432 /prefetch:8
                                                      10⤵
                                                        PID:5272
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3380,i,12139080488672553869,16764941284998560722,524288 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3452 /prefetch:8
                                                        10⤵
                                                          PID:1472
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3404,i,17494690216793595905,9333612050193123018,524288 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3492 /prefetch:8
                                                          10⤵
                                                            PID:1732
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3392,i,7702190381009673077,2107054832681740231,524288 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3472 /prefetch:8
                                                            10⤵
                                                              PID:6068
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4128,i,7338260279387727763,16835723181024873106,2097152 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4120 /prefetch:1
                                                              10⤵
                                                                PID:2020
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_gx_splash.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB147
                                                                10⤵
                                                                  PID:1724
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4632,i,7427067487703721461,15221476593510986755,2097152 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4652 /prefetch:1
                                                                  10⤵
                                                                    PID:5280
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4824,i,18067972318946401554,10540561573137106612,2097152 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4840 /prefetch:2
                                                                    10⤵
                                                                      PID:5876
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4992,i,13622098666559239867,11932185935177692336,2097152 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5016 /prefetch:1
                                                                      10⤵
                                                                        PID:5148
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5216,i,12816824333906351208,16773381438979085885,2097152 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5232 /prefetch:1
                                                                        10⤵
                                                                          PID:3252
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5372,i,4016916666253163752,5098588228025846863,524288 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5348 /prefetch:8
                                                                          10⤵
                                                                            PID:1188
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5376,i,14310528818408341202,15979743883017333970,524288 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5364 /prefetch:8
                                                                            10⤵
                                                                              PID:1868
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5380,i,13488512259963048868,632550160227376650,524288 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5428 /prefetch:8
                                                                              10⤵
                                                                                PID:5140
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5384,i,652014944642963538,4588624742011834327,524288 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5464 /prefetch:8
                                                                                10⤵
                                                                                  PID:4820
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6184,i,8004073682830308967,15014999697315319376,2097152 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6200 /prefetch:2
                                                                                  10⤵
                                                                                    PID:4868
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6600,i,11940507034860834920,6362859129840524069,2097152 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=5496 /prefetch:2
                                                                                    10⤵
                                                                                      PID:896
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5808,i,15091496023101250504,12236376998370433519,2097152 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6844 /prefetch:2
                                                                                      10⤵
                                                                                        PID:6868
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 OPR/134.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-gaming-extension=on --with-feature:gx-post-mortem=on --with-feature:gx-profiles-streamlabs-promo=off --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sharing-point=off --with-feature:sitecheck-age=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6876,i,16441829106368570407,5488176346301006544,2097152 --field-trial-handle=1928,i,11313821092126100260,659079887562753908,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14823274864725028501,6238736855720424103,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5784 /prefetch:1
                                                                                        10⤵
                                                                                          PID:4776
                                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\assistant\Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe
                                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\assistant\Opera_GX_assistant_134.0.5954.44_Setup.exe_sfx.exe"
                                                                                    7⤵
                                                                                    • Executes dropped EXE
                                                                                    • System Location Discovery: System Language Discovery
                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                    PID:4980
                                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\assistant\assistant_installer.exe
                                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\assistant\assistant_installer.exe" --version
                                                                                    7⤵
                                                                                    • Executes dropped EXE
                                                                                    • Loads dropped DLL
                                                                                    • System Location Discovery: System Language Discovery
                                                                                    • Enumerates system info in registry
                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                    • Suspicious use of WriteProcessMemory
                                                                                    PID:5484
                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\assistant\assistant_installer.exe
                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x240,0x244,0x248,0x23c,0x24c,0x101cb80,0x101cb8c,0x101cb98
                                                                                      8⤵
                                                                                      • Executes dropped EXE
                                                                                      • Loads dropped DLL
                                                                                      • System Location Discovery: System Language Discovery
                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                      PID:4924
                                                                      • C:\Windows\SysWOW64\DllHost.exe
                                                                        C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                                                                        1⤵
                                                                        • System Location Discovery: System Language Discovery
                                                                        • Suspicious use of SetWindowsHookEx
                                                                        PID:1180
                                                                      • C:\Windows\system32\wbem\unsecapp.exe
                                                                        C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                        1⤵
                                                                          PID:4272
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart
                                                                          1⤵
                                                                            PID:5772
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_crashreporter.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=134.0.5954.44 --initial-client-data=0x188,0x18c,0x190,0x184,0x194,0x7ffdf5656310,0x7ffdf5656320,0x7ffdf5656330
                                                                              2⤵
                                                                                PID:1396

                                                                            Network

                                                                                  MITRE ATT&CK Enterprise v16

                                                                                  Reconnaissance

                                                                                  Resource Development

                                                                                  Initial Access

                                                                                  Execution

                                                                                  Persistence

                                                                                  Boot or Logon Autostart Execution

                                                                                  1
                                                                                  T1547

                                                                                  Registry Run Keys / Startup Folder

                                                                                  1
                                                                                  T1547.001

                                                                                  Event Triggered Execution

                                                                                  1
                                                                                  T1546

                                                                                  Component Object Model Hijacking

                                                                                  1
                                                                                  T1546.015

                                                                                  Privilege Escalation

                                                                                  Boot or Logon Autostart Execution

                                                                                  1
                                                                                  T1547

                                                                                  Registry Run Keys / Startup Folder

                                                                                  1
                                                                                  T1547.001

                                                                                  Event Triggered Execution

                                                                                  1
                                                                                  T1546

                                                                                  Component Object Model Hijacking

                                                                                  1
                                                                                  T1546.015

                                                                                  Defense Evasion

                                                                                  Modify Registry

                                                                                  3
                                                                                  T1112

                                                                                  Subvert Trust Controls

                                                                                  1
                                                                                  T1553

                                                                                  Install Root Certificate

                                                                                  1
                                                                                  T1553.004

                                                                                  Credential Access

                                                                                  Credentials from Password Stores

                                                                                  1
                                                                                  T1555

                                                                                  Credentials from Web Browsers

                                                                                  1
                                                                                  T1555.003

                                                                                  Unsecured Credentials

                                                                                  1
                                                                                  T1552

                                                                                  Credentials In Files

                                                                                  1
                                                                                  T1552.001

                                                                                  Discovery

                                                                                  Peripheral Device Discovery

                                                                                  1
                                                                                  T1120

                                                                                  Query Registry

                                                                                  5
                                                                                  T1012

                                                                                  System Information Discovery

                                                                                  4
                                                                                  T1082

                                                                                  System Location Discovery

                                                                                  1
                                                                                  T1614

                                                                                  System Language Discovery

                                                                                  1
                                                                                  T1614.001

                                                                                  System Time Discovery

                                                                                  1
                                                                                  T1124

                                                                                  Lateral Movement

                                                                                  Collection

                                                                                  Data from Local System

                                                                                  1
                                                                                  T1005

                                                                                  Command and Control

                                                                                  Exfiltration

                                                                                  Impact

                                                                                  Replay Monitor

                                                                                  Loading Replay Monitor...

                                                                                  Downloads

                                                                                  E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                  • Size 471B
                                                                                  • SHA256 ca178ade85272cbf7d3f8c9e1efcd216eadbab55d8b9802aacbfe3e9c009dfdb
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                  • Size 416B
                                                                                  • SHA256 23e9cea5a6eaa33de63e60cf1cb1c1ff02ab09e5d88710a5f1bf5b214590d518
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  134.0.5954.44.manifest
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\134.0.5954.44.manifest
                                                                                  • Size 225B
                                                                                  • SHA256 46efe73f87240e9bc74ab16cb8c2147ed04e6a0baf2b668374f12d086570dabd
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  150x150Logo.scale-100.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\150x150Logo.scale-100.png
                                                                                  • Size 2KB
                                                                                  • SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  150x150Logo.scale-100_contrast-white.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                  • Size 1KB
                                                                                  • SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  150x150Logo.scale-140.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\150x150Logo.scale-140.png
                                                                                  • Size 3KB
                                                                                  • SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  150x150Logo.scale-140_contrast-white.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                  • Size 2KB
                                                                                  • SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  150x150Logo.scale-180.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\150x150Logo.scale-180.png
                                                                                  • Size 3KB
                                                                                  • SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  150x150Logo.scale-180_contrast-white.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                  • Size 3KB
                                                                                  • SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  150x150Logo.scale-80.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\150x150Logo.scale-80.png
                                                                                  • Size 1KB
                                                                                  • SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  150x150Logo.scale-80_contrast-white.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                  • Size 1KB
                                                                                  • SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  70x70Logo.scale-100.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\70x70Logo.scale-100.png
                                                                                  • Size 1KB
                                                                                  • SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  70x70Logo.scale-100_contrast-white.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                  • Size 1KB
                                                                                  • SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  70x70Logo.scale-140.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\70x70Logo.scale-140.png
                                                                                  • Size 1KB
                                                                                  • SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  70x70Logo.scale-140_contrast-white.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                  • Size 1KB
                                                                                  • SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  70x70Logo.scale-180.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\70x70Logo.scale-180.png
                                                                                  • Size 2KB
                                                                                  • SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  70x70Logo.scale-180_contrast-white.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                  • Size 2KB
                                                                                  • SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  70x70Logo.scale-80.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\70x70Logo.scale-80.png
                                                                                  • Size 1KB
                                                                                  • SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  70x70Logo.scale-80_contrast-white.png
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                  • Size 901B
                                                                                  • SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  CChromaEditorLibrary64.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\CChromaEditorLibrary64.dll
                                                                                  • Size 145KB
                                                                                  • SHA256 b8d511b48b055d0d4a12e16198b7111f04125878b8103d06cc42ab7e6412957e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  CUESDK.x64_2017.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\CUESDK.x64_2017.dll
                                                                                  • Size 474KB
                                                                                  • SHA256 1980b41981766ae02f91b1f6dce532376effd1ae0d21d3834d20f2c26b42e83d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  assistant_package
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\assistant_package
                                                                                  • Size 3.6MB
                                                                                  • SHA256 fd971bc67cc49f02783fe605738cc3e57e76524280fcce2801480d85efa7ff91
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  d3dcompiler_47.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\d3dcompiler_47.dll
                                                                                  • Size 4.5MB
                                                                                  • SHA256 9eb78ece429b7ff6f5bb28b28da09d4166e42b66699625a568883658ffbb8266
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  dxcompiler.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\dxcompiler.dll
                                                                                  • Size 24.5MB
                                                                                  • SHA256 e9666f63095494ff20d8605e9b6cd4996690bf44ac96619fe16b7983095b0ecf
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  installer.exe
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\installer.exe
                                                                                  • Size 9.1MB
                                                                                  • SHA256 fdc0e6dc74ca331cab5d788994fa77edfb3889f3a53ba97be49270b72988ac1f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  custom_partner_content.json
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\134.0.5954.44\resources\custom_partner_content.json
                                                                                  • Size 245KB
                                                                                  • SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  opera.exe
                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
                                                                                  • Size 2.9MB
                                                                                  • SHA256 f9a3e32e46d23c6d431684f04f178288a4aecb0fc8a3c1aa3ee09de4fe6727a6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Opera GX Browser.lnk
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\Opera GX Browser.lnk
                                                                                  • Size 1KB
                                                                                  • SHA256 7651d9d11b7bbb813119155d6b92556d7cb3ffd80291e2fb7c9afa99e1aa9df6
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  additional_file0.tmp
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\additional_file0.tmp
                                                                                  • Size 2.8MB
                                                                                  • SHA256 70f1b1cbe5162fd8842c441779ef4d59de6b182d1448fc6285c6a73ae3033fc4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  assistant_installer.exe
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\assistant\assistant_installer.exe
                                                                                  • Size 2.4MB
                                                                                  • SHA256 c5eef147beda944c8bff63591165b4c49e556d2c45c6ea9b9f1d9e16f180621e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  dbgcore.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\assistant\dbgcore.dll
                                                                                  • Size 196KB
                                                                                  • SHA256 856a7e6aacf1934324f08dc42b4b37cb20886d933cc0c57283c8425f9ebedbdd
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  dbghelp.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\assistant\dbghelp.dll
                                                                                  • Size 1.8MB
                                                                                  • SHA256 8f880333398382fea1efa73751f4b16d8204a60cc13aefc8c4223b8086eccd81
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  installer_prefs_include.json
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\installer_prefs_include.json
                                                                                  • Size 242B
                                                                                  • SHA256 40ea1fbf69784552a6aca6f03f95b7ec4c38332d39c88322835c70b661d643dd
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  installer_prefs_include.json
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\installer_prefs_include.json
                                                                                  • Size 933B
                                                                                  • SHA256 2a41585bd2bba7c6efc5e89a90e8eac0b209be7aedab659f123a9ccebdd87be1
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  installer_prefs_include.json.backup
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\d820ce0a-30dc-44fd-89bf-a95c0fa6b0b4 Opera GX Installer Temp\opera_package_202608150409301\installer_prefs_include.json.backup
                                                                                  • Size 227B
                                                                                  • SHA256 97331f17409895395d817dd6dab7119ff107665a9f866a3c2926bfa9ada6b1b7
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  installer.exe
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\7zSCF6852E8\installer.exe
                                                                                  • Size 9.1MB
                                                                                  • SHA256 ec964a3aed41470a82bbde43181708cd08380d26707290d7246f3cab7b55bda0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  200.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico
                                                                                  • Size 116KB
                                                                                  • SHA256 9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  BrowserInstaller.exe
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe
                                                                                  • Size 3.7MB
                                                                                  • SHA256 e20f18d8c5d3621a81d35fe43d759ddb148e35d1856a94fbe95dfbec93127a10
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  IRIMG1.BMP
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.BMP
                                                                                  • Size 12KB
                                                                                  • SHA256 1d7a67b1c0d620506ac76da1984449dfb9c35ffa080dc51e439ed45eecaa7ee0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  IRIMG14.PNG
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG14.PNG
                                                                                  • Size 43KB
                                                                                  • SHA256 6528bb11becf79c17c77a9c6624b82074b9dd6d3e932852c8fe1da22a57854aa
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  IRIMG15.PNG
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG15.PNG
                                                                                  • Size 644B
                                                                                  • SHA256 207bd7ad2eb7f48a2a1be1253363fa120ae79e25eacbd37d6b9be52d2128bfdd
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  IRIMG2.BMP
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.BMP
                                                                                  • Size 12KB
                                                                                  • SHA256 9c893fe1ab940ee4c2424aa9dd9972e7ad3198da670006263ecbbb5106d881e3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  IRIMG3.BMP
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.BMP
                                                                                  • Size 12KB
                                                                                  • SHA256 4c85cdddd497ad81fedb090bc0f8d69b54106c226063fdc1795ada7d8dc74e26
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  IRIMG9.PNG
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG9.PNG
                                                                                  • Size 438B
                                                                                  • SHA256 d16a8eaf8f979e45bacbbd8ef14afe482d74e926dff2e87e569342874ba34145
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  IRZip.lmd
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
                                                                                  • Size 400KB
                                                                                  • SHA256 3a6794c90d69383bd76098992cb512ae343cb2e1a3680dd4794e49895472b429
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Wow64.lmd
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
                                                                                  • Size 252KB
                                                                                  • SHA256 27b48727237cd0f8a1205e01e5c93cbe6c7a2f3938faf8d8daa5191094c347a5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  irsetup.exe
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
                                                                                  • Size 1.8MB
                                                                                  • SHA256 96070b2d82b6bffd54719f9753909be5f5151edbd5b37b26f50dea2e995ea430
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lua5.3.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.3.dll
                                                                                  • Size 395KB
                                                                                  • SHA256 eef58c3dae331da03872b973230aa56b40e34035035cca5b468eda0c40daa819
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  irsetup.exe
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
                                                                                  • Size 1.7MB
                                                                                  • SHA256 ea04ee2883ca5dcb461ea894a4e2def7d0c89f11d9f06f3bae020f6a25e7b75d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lua5.3.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.3.dll
                                                                                  • Size 395KB
                                                                                  • SHA256 0e43d22649d6b2ecbac9915dc6498fe1f41777dd33147d962b30dad0d5e76ab3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  opera-installer-bro.exe
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
                                                                                  • Size 3.9MB
                                                                                  • SHA256 46339959de037520ae0dfefad4bf119da6715df7ddb3a16b7d685e928f477f4e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  setuparguments.ini
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
                                                                                  • Size 802B
                                                                                  • SHA256 73b4d9f3ff9a933246f18f7301495365cc32f5e22bc788d624ae7e8c571394fe
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  IRIMG1.PNG
                                                                                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG1.PNG
                                                                                  • Size 45KB
                                                                                  • SHA256 a42ab4d62c5a5286202df15f9ad32b22396d5d12c7a4db8c5a2c98f90160ade1
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  IRIMG10.PNG
                                                                                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG10.PNG
                                                                                  • Size 206B
                                                                                  • SHA256 348e3f3544cca4c9ca2af323fa8b3453a70ea421c82b331681dc1d4ef74921f3
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  IRIMG13.PNG
                                                                                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG13.PNG
                                                                                  • Size 41KB
                                                                                  • SHA256 1708790d5496b9cc325cc0249cfa272aac3c3738188fc41eef83e8592de247ff
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  IRIMG4.BMP
                                                                                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.BMP
                                                                                  • Size 451KB
                                                                                  • SHA256 64da5bd044908b2c3a725c5a55edec1644be498f41ea05d42a6ae8cd797f1d80
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  IRIMG4.PNG
                                                                                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\IRIMG4.PNG
                                                                                  • Size 368B
                                                                                  • SHA256 3207283d0abc0dd36c0991b40a738247394bbc92e5696eb790a5c888a9f28106
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  uninstall.xml
                                                                                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                                  • Size 21KB
                                                                                  • SHA256 171373a6f56abe80d32ea30324e1ac6bdf5337152e0478278e9293d145395980
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  uninstall.xml
                                                                                  • Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
                                                                                  • Size 21KB
                                                                                  • SHA256 fdcf14380ba32fe40aa3912f4d36dd1ea840bbbd34ed82f72d40528f3540006a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  settings.dat
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
                                                                                  • Size 40B
                                                                                  • SHA256 6cac3534b5f6c84fe36bb9fad8113f6a5e03e6ac07a4039d01448a9efcbc2bfd
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  81e685d5-dd3b-4356-9251-3158e5a8eb02.tmp
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\81e685d5-dd3b-4356-9251-3158e5a8eb02.tmp
                                                                                  • Size 162KB
                                                                                  • SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  MANIFEST-000001
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
                                                                                  • Size 41B
                                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  961b7e96-c2c5-4641-be3e-6c500f8fbd36.tmp
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\961b7e96-c2c5-4641-be3e-6c500f8fbd36.tmp
                                                                                  • Size 381B
                                                                                  • SHA256 36957d97a5d2dab4861c45e480a24b46aaad064c54cb97e2ac2e7d1e9f7a80df
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 493B
                                                                                  • SHA256 db35b5dc3a2f97bb4d2e8e5fe87d2f31366279fa5835b8cf87daa8fcbe6bec0b
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 605B
                                                                                  • SHA256 d0bb1c3496d589213686add645396ebdd14c95a300c8578cb0b505654e4f8525
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 733B
                                                                                  • SHA256 3d3f9d3f551e0de1a568648bf18ba07b950b35e60d0a68409626901f660dcc24
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 ed4315238a7dc7732c91567aa4d895270c5459faea10a113c8908fd63e635921
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 db6cdcc44a90b4eb7f923972f527036f2e975b432e99bcd1e10ec22778ce55c1
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 909B
                                                                                  • SHA256 fe282b84836bae081b11d3764cd3a95b281d97001e5b9d2c79cd828d7d315b3a
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 8e09dc33dfe41e871655e6ced4dc0bb71009e9bb32745357604c907d6bdc4792
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 a8d847f32c1cc1f1038ca311f51f1b5d2a9ec2eb2b31caa66953d65f3802dbe3
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 86605ddf5073f6006ed0e2ad0d34cf7b00fae4dec6870af5712dbfa183f75694
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 6136be6b145394d176e50a46163e96680fa172f9f7df8089909f67cfd94c45f5
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 4916218388493dae4886283de32483adb2e83bc2c26011e77d1d4362e60656cb
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 fefb441b137c13f6a54559cbfb5ad87dfd7c3bdb28ad27dd94368a82b4895efb
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 8aae4f4fb8dbe9c2985bfe9f3f1907f956f644cd0e30e97333efaf7970a9e1f1
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 2KB
                                                                                  • SHA256 ec16631ba339c64b9e2aac42ff19d64ebf294cbe5395262614387432f6a1d612
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 2KB
                                                                                  • SHA256 57f139211b7c2fb96b54e45e6963b9e875c43157103bf2604b2f823e7ad3a7c2
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 2KB
                                                                                  • SHA256 9037ccc0257c6b861dbaf22695a35784e50a58e94bf6b4300abbf9fd86a47009
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 2KB
                                                                                  • SHA256 7744e857c630a6a9f5b8580a1d025a1a60e7da70669bde13bee1dcca8578bddf
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 2KB
                                                                                  • SHA256 253598287597ea536b5d98c0be3ab23e9547ae532d6d146aa9518753e4b6b15f
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 2KB
                                                                                  • SHA256 897172854050c2eaa9e87f7d4dc713e27f4fa64b6c730cea2e0b622c906fe312
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 2KB
                                                                                  • SHA256 ede69ba8aa1c96ba4bd54c28d7626e39a0971b2b0da69a85099c92650a17dc53
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 9KB
                                                                                  • SHA256 b13524e0b3e1557ee78f3f35d6ac041dae68743de0c685bc149814d876d4ea3e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 9KB
                                                                                  • SHA256 425670d911d5f14293c0079f06eea3b83d296905522d500d71f2d8f3652d2e89
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 7d890dcc0973818e27fece6e902842bbdc26269c803bb1fd36b9678ab9ba3e5b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 64606f9f8113a24e39bd471a16022eedda0ee52d230f1bd36fd42df778cf8c2d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 83d711680d29baf52b38b732261301b928ed5c212798265514f77854e02e03e4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 29ac7e181c6e60dc6e6e079303a704ebc5f13cc438153aabd7f3fd8f0ca0f69c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 1KB
                                                                                  • SHA256 2d39fb0d4b3b43f90dac67c374e2f438b880936b55b9a4a93a057908c2728c01
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 e41d0e7192def92e1f0eb4b74335734b6cbf77fb64746d0a2d3fea703e16c121
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 6d22f1a8bd1c095521946cd6816ff889a43719adc94fed95594df7d8b97848fc
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 725c42f4a44654a9eadd4a98acae9f71cdade588ffd97fd5294d0903f329f1ec
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 f89d002e23d918e4d766e06a6dc5f89d7b04326fff24e40bcca32d263e8b295c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 bc53bff4eddc5b97e11700e274958e7ebd9a20574b489d9136f929332ae2f84d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 0b80fc36cb3d439b90b6225f810244663a87149b15337deb8a781f747b09af0c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 052633dc2c95caf457b5799b70e41e19da0fba48a353f2644657cc7cd47cd7b2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 ee4e2c51cd56faf44397747dd9899a8a3b13c9497ae66db93720fcbac770d5c2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 f789601ec8a618028f0d0f983b099d0b2139a9b4cbac67f3b8c7bba2e9931644
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 92e40b7815ec7791fd41996ced7848b09cfd76c1ddbb7e517cfcb8975b4e7496
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 9KB
                                                                                  • SHA256 2a2706e3bebd55fda0cb7c8d87e1b6966ad30b92e10492ffa0edf81ddc73ec62
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 9KB
                                                                                  • SHA256 3d0825e8c3d547ae912955c07d799a7850af7db890d01b430f8ba231b833bd85
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 9KB
                                                                                  • SHA256 f9a4fb3cc15f36b934a52fddfcda537525651e6f6990577344d596dd80759142
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 9KB
                                                                                  • SHA256 bdf892722601c1f8d1713611cc15df8bd754099d3efd160dfdd425ed5f39d6e3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 9KB
                                                                                  • SHA256 0150ecca69b9097eeb925f2b988dc5fd26748dcf22d2edd6bdd1a6def11229d4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 8KB
                                                                                  • SHA256 4e81e2de4dd56d70e9f0177b17828d7e68af1e1f3ffc65c7e47227b83347a31d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 9KB
                                                                                  • SHA256 ea4126687feedb272867ea7a3bd6834fd1337d5b02e924b561796f9e97341604
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_06d75637-e506-4f1e-95ce-0782c52e3019.raw
                                                                                  • Size 9KB
                                                                                  • SHA256 91ca2d6c33134facc2eedd83d3285e6d4c2ef7bee52fdbbfeabd5b907bb0f747
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  CURRENT
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\CURRENT
                                                                                  • Size 16B
                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  ee477f98-026b-4b77-89bb-a27298deb22c.tmp
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ee477f98-026b-4b77-89bb-a27298deb22c.tmp
                                                                                  • Size 414B
                                                                                  • SHA256 3b0e00056b5749858d188d91d55a9c5c70f6a966bd179a06656668e938a427ad
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  ssdfp6516.0.1037161566
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6516.0.1037161566
                                                                                  • Size 507B
                                                                                  • SHA256 dffc42cfcdf0e5a3e5ad683884e95c32771601abb9c0c56be15fadf2b8ac2c25
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  ssdfp6516.0.1037161566
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6516.0.1037161566
                                                                                  • Size 599B
                                                                                  • SHA256 c57de593c169e35940e54af978ba25b7bd07fdb7be57505e999a5754b857c610
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  ssdfp6516.0.1037161566
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6516.0.1037161566
                                                                                  • Size 691B
                                                                                  • SHA256 d4ae6c612f2e43e2df815fad7cc2701838f53203495c683484d04e7d87a44f23
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  ssdfp6516.0.1037161566
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6516.0.1037161566
                                                                                  • Size 780B
                                                                                  • SHA256 5f440af0ce63e529ea5114067d52e5b59b7eefb90650a28084922057988f48d6
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  ssdfp6516.0.1037161566
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6516.0.1037161566
                                                                                  • Size 871B
                                                                                  • SHA256 a1b46c750cfedcf0f3d9b5360d044c5006ac192136d3741b04cb2a78ac4a61bc
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  ssdfp6516.0.1037161566
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6516.0.1037161566
                                                                                  • Size 1KB
                                                                                  • SHA256 9458941c02feb30a4a8b9994a966d8b3cacbf8762d5c69286f1d4b73250f865f
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  ssdfp6516.0.1037161566
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6516.0.1037161566
                                                                                  • Size 1KB
                                                                                  • SHA256 ca676b1e834199c7aea1cf55ad0c02bbad8cb8d5cf4c8d616f0db6af344b9677
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  ssdfp6516.0.1037161566
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6516.0.1037161566
                                                                                  • Size 964B
                                                                                  • SHA256 02d7268279961f350fdf6b3527903798440561702465c0a6df9c8efba068ad5b
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  ssdfp6516.0.1037161566
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6516.0.1037161566
                                                                                  • Size 1KB
                                                                                  • SHA256 f6c61a673361abb5b15c718f8b21525dcc41d95b672af6c75c22fb296889ae19
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  ssdfp6516.0.1037161566
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp6516.0.1037161566
                                                                                  • Size 1KB
                                                                                  • SHA256 a06db70867f8268fef4292ebcfe3286a18fce93808c68102f0488faea3136f3d
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  data_0
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
                                                                                  • Size 8KB
                                                                                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                  Submit Download

                                                                                  data_1
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_1
                                                                                  • Size 264KB
                                                                                  • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                  Submit Download

                                                                                  data_2
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
                                                                                  • Size 8KB
                                                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                  Submit Download

                                                                                  data_3
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
                                                                                  • Size 8KB
                                                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                  Submit Download

                                                                                  memory/4324-1776-0x0000000000340000-0x0000000000937000-memory.dmp
                                                                                  Download

                                                                                  memory/4324-675-0x0000000000340000-0x0000000000937000-memory.dmp
                                                                                  Download

                                                                                  memory/4324-602-0x0000000000340000-0x0000000000937000-memory.dmp
                                                                                  Download

                                                                                  memory/5520-1819-0x00007FFE12CC0000-0x00007FFE12CC1000-memory.dmp
                                                                                  Download

                                                                                  memory/5520-1820-0x00007FFE11B70000-0x00007FFE11B71000-memory.dmp
                                                                                  Download

                                                                                  memory/6100-674-0x0000000000D10000-0x0000000001311000-memory.dmp
                                                                                  Download

                                                                                  memory/6100-14-0x0000000000D10000-0x0000000001311000-memory.dmp
                                                                                  Download

                                                                                  memory/6100-1775-0x0000000000D10000-0x0000000001311000-memory.dmp
                                                                                  Download

                                                                                  memory/6100-557-0x0000000000D10000-0x0000000001311000-memory.dmp
                                                                                  Download

                                                                                  memory/6100-558-0x0000000000D10000-0x0000000001311000-memory.dmp
                                                                                  Download

                                                                                  memory/6100-591-0x0000000000D10000-0x0000000001311000-memory.dmp
                                                                                  Download

                                                                                  memory/6100-1438-0x0000000000D10000-0x0000000001311000-memory.dmp
                                                                                  Download

                                                                                  memory/6100-676-0x0000000000D10000-0x0000000001311000-memory.dmp
                                                                                  Download

                                                                                  memory/6100-1440-0x0000000000D10000-0x0000000001311000-memory.dmp
                                                                                  Download